qutebrowser records

4 published records for vendor qutebrowser.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2021-41146No exploit	Arbitrary command execution on Windows in qutebrowserqutebrowser · qutebrowser · CWE-77 pre-auth RCE Command injection	High8.8	—	1.5%	Oct 21, 2021
35Monitor	CVE-2018-10895No exploit	qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://*' URLs.qutebrowser · qutebrowser · CWE-352 pre-auth RCE CSRF	High8.8	—	1.2%	Jul 12, 2018
24Monitor	CVE-2018-1000559No exploit	qutebrowser version introduced in v0.11.0 (1179ee7a937fb31414d77d9970bac21095358449) contains a Cross Site Scripting (XSS) vulnerability in qutebrowser · qutebrowser · CWE-79 Pre-auth XSS	Medium6.1	—	1.5%	Jun 26, 2018
14Monitor	CVE-2020-11054No exploit	Incorrect Provision of Specified Functionality in qutebrowserqutebrowser · qutebrowser · CWE-684	Low3.5	—	1.5%	May 7, 2020

CVE-2021-41146
35Monitor
Arbitrary command execution on Windows in qutebrowser
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
qutebrowser · qutebrowserOct 21, 2021
CVE-2018-10895
35Monitor
qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://*' URLs.
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
- CSRF
qutebrowser · qutebrowserJul 12, 2018
CVE-2018-1000559
24Monitor
qutebrowser version introduced in v0.11.0 (1179ee7a937fb31414d77d9970bac21095358449) contains a Cross Site Scripting (XSS) vulnerability in
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
qutebrowser · qutebrowserJun 26, 2018
CVE-2020-11054
14Monitor
Incorrect Provision of Specified Functionality in qutebrowser
LowCVSS 3.5No exploitEPSS 2%
qutebrowser · qutebrowserMay 7, 2020