Lucene search
K

9 matches found

NVD
NVD
added 2014/10/06 11:55 p.m.9 views

CVE-2013-1436

The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag...

7.5CVSS7.4AI score0.07075EPSS
Exploits1References4
OSV
OSV
added 2014/10/06 11:55 p.m.0 views

UBUNTU-CVE-2013-1436

The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag...

7.5CVSS6.1AI score0.07075EPSS
Exploits1References2
CVE
CVE
added 2014/10/06 11:0 p.m.46 views

CVE-2013-1436

The vulnerability affects the XMonad.Hooks.DynamicLog module in xmonad-contrib older than 0.11.2, where a crafted web page title can trigger arbitrary command execution when the user clicks the xmobar window title. The issue is caused by the title-processing path accepting and acting on malicious...

7.5CVSS7.3AI score0.07075EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2014/10/06 11:0 p.m.15 views

CVE-2013-1436

The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag...

7.5CVSS7.6AI score0.07075EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2014/05/28 12:0 a.m.2 views

PT-2014-1882

Name of the Vulnerable Software and Affected Versions xmonad-contrib versions prior to 0.11.2 Description The issue allows remote attackers to execute arbitrary commands via a web page title. This can be achieved when the user clicks on the xmobar window title, as demonstrated using an action tag...

7.5CVSS7.4AI score0.07075EPSS
Exploits1References19
OpenVAS
OpenVAS
added 2013/08/20 12:0 a.m.15 views

Fedora Update for xmobar FEDORA-2013-13332

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.07075EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2013/08/20 12:0 a.m.11 views

Fedora Update for xmobar FEDORA-2013-13332

Check for the Version of xmobar OpenVAS Vulnerability Test Fedora Update for xmobar FEDORA-2013-13332 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

7.5CVSS0.5AI score0.07075EPSS
Exploits1References2
Fedora
Fedora
added 2013/08/06 12:26 a.m.22 views

[SECURITY] Fedora 19 Update: xmobar-0.18-1.fc19

Inspired by the Ion3 status bar, it supports similar features, like dynamic color management, output templates, and extensibility through plugins...

7.5CVSS1.4AI score0.07075EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2013/08/06 12:0 a.m.19 views

Fedora 19 : bluetile-0.6-18.fc19 / ghc-X11-1.6.1.1-1.fc19 / ghc-X11-xft-0.3.1-10.fc19 / etc (2013-13332)

xmonad-contrib-0.11.2 fixes a vulnerability in the DynamicLog module - update X11 to 1.6.1.1 - update xmobar to 0.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

7.5CVSS5.4AI score0.07075EPSS
Exploits1References8
Rows per page
Query Builder