Lucene search
K

26 matches found

OSV
OSV
added 2025/11/14 2:45 p.m.12 views

HSEC-2023-0003 code injection in xmonad-contrib

code injection in xmonad-contrib The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag...

7.5CVSS7.5AI score0.07075EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2013-1474

Malware in sbrugna...

7.5CVSS6AI score0.07075EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2015/09/29 12:0 a.m.12 views

Gentoo Security Advisory GLSA 201405-28

Gentoo Linux Local Security Checks GLSA 201405-28 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

7.5CVSS5AI score0.07075EPSS
Exploits1References1
NVD
NVD
added 2014/10/06 11:55 p.m.9 views

CVE-2013-1436

The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag...

7.5CVSS7.4AI score0.07075EPSS
Exploits1References4
OSV
OSV
added 2014/10/06 11:55 p.m.0 views

DEBIAN-CVE-2013-1436

The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag...

7.5CVSS7.7AI score0.07075EPSS
Exploits1References1
OSV
OSV
added 2014/10/06 11:55 p.m.1 views

CVE-2013-1436

The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag...

7.3AI score
Exploits0References4
OSV
OSV
added 2014/10/06 11:55 p.m.0 views

UBUNTU-CVE-2013-1436

The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag...

7.5CVSS6.1AI score0.07075EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2014/10/06 11:55 p.m.12 views

CVE-2013-1436

The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag...

7.5CVSS6.1AI score0.07075EPSS
Exploits1References1
Prion
Prion
added 2014/10/06 11:55 p.m.6 views

Design/Logic Flaw

The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag...

7.5CVSS7.8AI score0.07075EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2014/10/06 11:0 p.m.17 views

CVE-2013-1436

The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag...

7.2AI score0.07075EPSS
Exploits1References4
CVE
CVE
added 2014/10/06 11:0 p.m.43 views

CVE-2013-1436

The vulnerability affects the XMonad.Hooks.DynamicLog module in xmonad-contrib older than 0.11.2, where a crafted web page title can trigger arbitrary command execution when the user clicks the xmobar window title. The issue is caused by the title-processing path accepting and acting on malicious...

7.5CVSS7.3AI score0.07075EPSS
Exploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/05/29 12:0 a.m.20 views

GLSA-201405-28 : xmonad-contrib: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201405-28 xmonad-contrib: Arbitrary code execution A vulnerability in the Xmonad.Hooks.DynamicLog module could allow a malicious website with a specially crafted title to inject commands into the title bar which would be executed...

7.5CVSS6.2AI score0.07075EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2014/05/28 12:0 a.m.1 views

PT-2014-1882

Name of the Vulnerable Software and Affected Versions xmonad-contrib versions prior to 0.11.2 Description The issue allows remote attackers to execute arbitrary commands via a web page title. This can be achieved when the user clicks on the xmobar window title, as demonstrated using an action tag...

7.5CVSS7.4AI score0.07075EPSS
Exploits1References19
OpenVAS
OpenVAS
added 2013/08/20 12:0 a.m.17 views

Fedora Update for ghc-xmonad-contrib FEDORA-2013-13332

Check for the Version of ghc-xmonad-contrib OpenVAS Vulnerability Test Fedora Update for ghc-xmonad-contrib FEDORA-2013-13332 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

7.5CVSS6.4AI score0.07075EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2013/08/20 12:0 a.m.18 views

Fedora Update for ghc-xmonad-contrib FEDORA-2013-13332

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.07075EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2013/08/20 12:0 a.m.19 views

Fedora Update for xmonad FEDORA-2013-13332

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.07075EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2013/08/20 12:0 a.m.10 views

Fedora Update for xmonad FEDORA-2013-13332

Check for the Version of xmonad OpenVAS Vulnerability Test Fedora Update for xmonad FEDORA-2013-13332 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

7.5CVSS6.4AI score0.07075EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2013/08/08 12:0 a.m.11 views

Fedora Update for ghc-xmonad-contrib FEDORA-2013-13388

Check for the Version of ghc-xmonad-contrib OpenVAS Vulnerability Test Fedora Update for ghc-xmonad-contrib FEDORA-2013-13388 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

7.5CVSS0.07075EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2013/08/08 12:0 a.m.13 views

Fedora Update for ghc-xmonad-contrib FEDORA-2013-13388

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.07075EPSS
Exploits1References2
Fedora
Fedora
added 2013/08/06 12:26 a.m.31 views

[SECURITY] Fedora 19 Update: xmonad-0.11-4.fc19

xmonad is a tiling window manager for X. Windows are arranged automatically to tile the screen without gaps or overlap, maximising screen use. All features of the window manager are accessible from the keyboard: a mouse is strictly optional. xmonad is written and extensible in Haskell. Custom...

7.5CVSS1AI score0.07075EPSS
Exploits1
Rows per page
Query Builder