uzbl

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

uzbl records in CISA KEV

No uzbl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Uzbl 3 records MEDIUM

Records

3 records

TI-2010-02685 CVE-2010-2809 · GHSA-r8gc-4gr6-4vf3

The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not…

MEDIUM 40

The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF a…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.07345 Published 2010-08-19 No fix listed CWE-94

TI-2010-00011 CVE-2010-0011 · GHSA-h8hq-vp3m-hv4f

The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of…

LOW 37

The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02135 Published 2010-02-25 No fix listed CWE-264

TI-2012-00778 CVE-2012-0843 · GHSA-hvvw-phv8-55v4

uzbl: Information disclosure via world-readable cookies storage file

LOW 25

uzbl: Information disclosure via world-readable cookies storage file

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00429 Published 2019-11-19 No fix listed CWE-200

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0