Поиск уязвимостей
Количество 7
Количество 7
GHSA-vw27-fwjf-5qxm
Arbitrary command execution on Windows via qutebrowserurl: URL handler
CVE-2021-41146
qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a `qutebrowserurl:` URL handler. With certain applications, opening a specially crafted `qutebrowserurl:...` URL can lead to execution of qutebrowser commands, which in turn allows arbitrary code execution via commands such as `:spawn` or `:debug-pyeval`. Only Windows installs where qutebrowser is registered as URL handler are affected. The issue has been fixed in qutebrowser v2.4.0. The fix also adds additional hardening for potential similar issues on Linux (by adding the new --untrusted-args flag to the .desktop file), though no such vulnerabilities are known.
CVE-2021-41146
qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a `qutebrowserurl:` URL handler. With certain applications, opening a specially crafted `qutebrowserurl:...` URL can lead to execution of qutebrowser commands, which in turn allows arbitrary code execution via commands such as `:spawn` or `:debug-pyeval`. Only Windows installs where qutebrowser is registered as URL handler are affected. The issue has been fixed in qutebrowser v2.4.0. The fix also adds additional hardening for potential similar issues on Linux (by adding the new --untrusted-args flag to the .desktop file), though no such vulnerabilities are known.
CVE-2021-41146
qutebrowser is an open source keyboard-focused browser with a minimal ...
ALT-PU-2022-1436
ALT-PU-2022-1436: package `qutebrowser` update to version 2.4.0-alt2
ALT-PU-2021-3096
ALT-PU-2021-3096: package `qutebrowser` update to version 2.4.0-alt1
ALT-PU-2020-3156
ALT-PU-2020-3156: package `qutebrowser` update to version 1.14.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-vw27-fwjf-5qxm Arbitrary command execution on Windows via qutebrowserurl: URL handler | CVSS3: 8.8 | 1% Низкий | около 5 лет назад |
 | CVE-2021-41146 qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a `qutebrowserurl:` URL handler. With certain applications, opening a specially crafted `qutebrowserurl:...` URL can lead to execution of qutebrowser commands, which in turn allows arbitrary code execution via commands such as `:spawn` or `:debug-pyeval`. Only Windows installs where qutebrowser is registered as URL handler are affected. The issue has been fixed in qutebrowser v2.4.0. The fix also adds additional hardening for potential similar issues on Linux (by adding the new --untrusted-args flag to the .desktop file), though no such vulnerabilities are known. | CVSS3: 8.8 | 1% Низкий | около 5 лет назад |
 | CVE-2021-41146 qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a `qutebrowserurl:` URL handler. With certain applications, opening a specially crafted `qutebrowserurl:...` URL can lead to execution of qutebrowser commands, which in turn allows arbitrary code execution via commands such as `:spawn` or `:debug-pyeval`. Only Windows installs where qutebrowser is registered as URL handler are affected. The issue has been fixed in qutebrowser v2.4.0. The fix also adds additional hardening for potential similar issues on Linux (by adding the new --untrusted-args flag to the .desktop file), though no such vulnerabilities are known. | CVSS3: 8.8 | 1% Низкий | около 5 лет назад |
| CVE-2021-41146 qutebrowser is an open source keyboard-focused browser with a minimal ... | CVSS3: 8.8 | 1% Низкий | около 5 лет назад |
| ALT-PU-2022-1436 ALT-PU-2022-1436: package `qutebrowser` update to version 2.4.0-alt2 | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2021-3096 ALT-PU-2021-3096: package `qutebrowser` update to version 2.4.0-alt1 | CVSS3: 8.8 | 1% Низкий | около 5 лет назад |
| ALT-PU-2020-3156 ALT-PU-2020-3156: package `qutebrowser` update to version 1.14.0-alt1 | CVSS3: 8.8 | около 6 лет назад |
Уязвимостей на страницу