100 matches found
CVE-2021-41146
qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a qutebrowserurl: URL handler. With certain applications, opening a specially crafted qutebrowserurl:... URL can lead to execution of...
PYSEC-2021-382
qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a qutebrowserurl: URL handler. With certain applications, opening a specially crafted qutebrowserurl:... URL can lead to execution of...
CVE-2021-41146
The CVE-2021-41146 issue affects qutebrowser on Windows where the installer registers a qutebrowserurl: URL handler. When opened via certain applications (e.g., Outlook Desktop), a specially crafted qutebrowserurl: URL can inject arguments and allow execution of qutebrowser commands, enabling arb...
CVE-2021-41146 Arbitrary command execution on Windows in qutebrowser
qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a qutebrowserurl: URL handler. With certain applications, opening a specially crafted qutebrowserurl:... URL can lead to execution of...
CVE-2021-41146
qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a qutebrowserurl: URL handler. With certain applications, opening a specially crafted qutebrowserurl:... URL can lead to execution of...
qutebrowser 命令注入漏洞
qutebrowser is an open source keyboard browser based on Python and PyQt5. A security vulnerability exists in qutebrowser, which can be exploited by attackers to execute arbitrary code...
PT-2021-23126 · Unknown +1 · Qutebrowser +1
Name of the Vulnerable Software and Affected Versions: qutebrowser versions 1.7.0 through 2.3.x Description: The issue allows arbitrary code execution via commands such as :spawn or :debug-pyeval when a specially crafted qutebrowserurl: URL is opened with certain applications. Only Windows instal...
[SECURITY] Fedora 32 Update: qutebrowser-1.13.1-1.fc32
qutebrowser is a keyboard-focused browser with a minimal GUI. It=EF=BF=BD =EF=BF=BD=EF=BF=BDs based on Python, PyQt5 and QtWebEngine and free software, licensed under the GPL. It was inspired by other browsers/addons like dwb and Vimperator/Pentadacty l...
Fedora 32 : qutebrowser (2020-f0812d6aad)
We missed a few upstream releases but there's not breaking changes as far as I know. Lot of bug fixes and minor changes. ---- Addresses CVE-2020-11054: After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the...
Fedora: Security Advisory for qutebrowser (FEDORA-2020-fcd5fd47bd)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 31 Update: qutebrowser-1.11.1-1.fc31
qutebrowser is a keyboard-focused browser with a minimal GUI. It=EF=BF=BD =EF=BF=BD=EF=BF=BDs based on Python, PyQt5 and QtWebEngine and free software, licensed under the GPL. It was inspired by other browsers/addons like dwb and Vimperator/Pentadacty l...
FreeBSD : qutebrowser -- Reloading page with certificate errors shows a green URL (452d16bb-920d-11ea-9d20-18a6f7016652)
Qutebrowser developers report : After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the URL was mistakenly displayed as green colors.statusbar.url.successhttps...
GHSA-4RCQ-JV2F-898J Incorrect Provision of Specified Functionality in qutebrowser
Description After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the URL was mistakenly displayed as green colors.statusbar.url.successhttps. While the user...
Incorrect Provision of Specified Functionality in qutebrowser
Description After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the URL was mistakenly displayed as green colors.statusbar.url.successhttps. While the user...
False Green URL
qutebrowser is vulnerable to showing False Green URL. When a user reloaded a page which had a certificate error and was showing as yellow URL colors.statusbar.url.warn.fg, the same URL has turned up as green URL colors.statusbar.url.successhttps...
CVE-2020-11054
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the UR...
CVE-2020-11054
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the UR...
DEBIAN-CVE-2020-11054
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the UR...
PYSEC-2020-97
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the UR...
CVE-2020-11054
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the UR...