43 matches found
Fedora Update for uzbl FEDORA-2010-12386
Check for the Version of uzbl OpenVAS Vulnerability Test Fedora Update for uzbl FEDORA-2010-12386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
[SECURITY] Fedora 14 Update: uzbl-0-0.16.20100626gitafc0f873e.fc14
Uzbl is a lightweight web browser based on WebKit/Gtk+. Uzbl follows the UNIX philosophy - "Write programs that do one thing and do it well. Write programs to work together. Write programs to handle text streams, because that is a universal interface."...
Fedora 14 : uzbl-0-0.16.20100626gitafc0f873e.fc14 (2010-12386)
Fix a bug in the default configuration for the mouse bindings that can allow crafted links to execute arbitrary shell code. Please check your local configuration and replace '@SELECTEDURI' with '$8' in any string that is executed as shell code usually involves 'sh 'commandshere'. Note that Tenabl...
Fedora Update for uzbl FEDORA-2010-12276
Check for the Version of uzbl OpenVAS Vulnerability Test Fedora Update for uzbl FEDORA-2010-12276 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Fedora Update for uzbl FEDORA-2010-12276
The remote host is missing an update for the Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora Update for uzbl FEDORA-2010-12260
The remote host is missing an update for the Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 12 : uzbl-0-0.16.20100626gitafc0f873e.fc12 (2010-12276)
Fix a bug in the default configuration for the mouse bindings that can allow crafted links to execute arbitrary shell code. Please check your local configuration and replace '@SELECTEDURI' with '$8' in any string that is executed as shell code usually involves 'sh 'commandshere'. Note that Tenabl...
Fedora 13 : uzbl-0-0.16.20100626gitafc0f873e.fc13 (2010-12260)
Fix a bug in the default configuration for the mouse bindings that can allow crafted links to execute arbitrary shell code. Please check your local configuration and replace '@SELECTEDURI' with '$8' in any string that is executed as shell code usually involves 'sh 'commandshere'. Note that Tenabl...
[SECURITY] Fedora 13 Update: uzbl-0-0.16.20100626gitafc0f873e.fc13
Uzbl is a lightweight web browser based on WebKit/Gtk+. Uzbl follows the UNIX philosophy - "Write programs that do one thing and do it well. Write programs to work together. Write programs to handle text streams, because that is a universal interface."...
CVE-2010-2809
The default configuration of the binding in Uzbl before 2010.08.05 does not properly use the @SELECTEDURI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document...
Default configuration
The default configuration of the binding in Uzbl before 2010.08.05 does not properly use the @SELECTEDURI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document...
CVE-2010-2809
The default configuration of the binding in Uzbl before 2010.08.05 does not properly use the @SELECTEDURI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document...
CVE-2010-2809
CVE-2010-2809 affects Uzbl prior to 2010-08-05. The default Button2 binding fails to correctly use the @SELECTED_URI feature, allowing a user-assisted attacker to run arbitrary commands via a crafted HREF on an A element in an HTML document. The issue is described in the Fedora advisory for uzbl-...
CVE-2010-2809
The default configuration of the binding in Uzbl before 2010.08.05 does not properly use the @SELECTEDURI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document...
CVE-2010-2809
Removed by vendor...
uzbl 'uzbl-core' - '@SELECTED_URI' Mouse Button Bindings Command Injection
source: https://www.securityfocus.com/bid/42297/info uzbl 'uzbl-core' is prone to a vulnerability that lets attackers inject arbitrary commands because the application fails to adequately sanitize user-supplied input. This issue stems from an insecure default configuration setting. To exploit thi...
uzbl uzbl-core - @SELECTED_URI Mouse Button Bindings Command Injection
uzbl uzbl-core - @SELECTEDURI Mouse Button Bindings Command Injection source: https://www.securityfocus.com/bid/42297/info uzbl 'uzbl-core' is prone to a vulnerability that lets attackers inject arbitrary commands because the application fails to adequately sanitize user-supplied input. This issu...
CVE-2010-0011
The evaljs function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code...
CVE-2010-0011
The evaljs function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code...
Code injection
The evaljs function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code...