Uzbl

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:uzbl:uzbl:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUzbl (45ce19e0-37bb-502b-b64e-19cf5c12eb6e)
ProductUzbl (869a11e3-304b-5233-93f5-1f1a88a7ac9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/uzbl purl2cpe 2026-06-01 10:15:05.934871
pkg:github/uzbl/uzbl purl2cpe 2026-06-01 10:15:05.934874

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-0843 vulnerable 2026-06-08 05:00:45.867541 Details available
uzbl: Information disclosure via world-readable cookies storage file
Published: 2019-11-19T15:56:52.000Z
Updated: 2024-08-06T18:38:14.792Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2809 vulnerable 2026-06-08 04:55:10.801883 Details available
The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document.
Published: 2010-08-19T20:00:00.000Z
Updated: 2024-08-07T02:46:48.630Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0011 vulnerable 2026-06-08 04:51:52.314388 Details available
The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code.
Published: 2010-02-25T19:00:00.000Z
Updated: 2024-08-07T00:37:52.445Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.