Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

rxvt-unicode rxvt-unicode 9.0 vulnerabilities and exploits

(subscribe to this query)
3.7
CVSSv2
CVE-2008-1142
rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenario...
Aterm Aterm 1.00Eterm Eterm 0.9.2Mrxvt Mrxvt 0.4.2Mrxvt MrxvtEterm EtermRxvt Rxvt 2.7.8Rxvt RxvtRxvt-unicode Rxvt-unicodeRxvt-unicode Rxvt-unicode 9.0Rxvt-unicode Rxvt-unicode 7.8Rxvt-unicode Rxvt-unicode 7.7Rxvt-unicode Rxvt-unicode 7.6Rxvt-unicode Rxvt-unicode 7.5Rxvt-unicode Rxvt-unicode 5.5Rxvt-unicode Rxvt-unicode 5.4Rxvt-unicode Rxvt-unicode 5.3Rxvt-unicode Rxvt-unicode 5.2Rxvt-unicode Rxvt-unicode 3.8Rxvt-unicode Rxvt-unicode 3.7Rxvt-unicode Rxvt-unicode 3.6Rxvt-unicode Rxvt-unicode 3.5Rxvt-unicode Rxvt-unicode 2.2
7.6
CVSSv2
CVE-2014-3121
rxvt-unicode prior to 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote malicious users to manipulate arbitrary X window properties and execute arbitrary commands.
Marc Lehmann Rxvt-unicode 9.16Marc Lehmann Rxvt-unicode 9.15Marc Lehmann Rxvt-unicode 9.07Marc Lehmann Rxvt-unicode 9.06Marc Lehmann Rxvt-unicode 9.05Marc Lehmann Rxvt-unicode 9.18Marc Lehmann Rxvt-unicode 9.17Marc Lehmann Rxvt-unicode 9.09Marc Lehmann Rxvt-unicode 9.08Marc Lehmann Rxvt-unicode 9.14Marc Lehmann Rxvt-unicode 9.12Marc Lehmann Rxvt-unicode 9.02Marc Lehmann Rxvt-unicode 9.0Marc Lehmann Rxvt-unicodeMarc Lehmann Rxvt-unicode 9.11Marc Lehmann Rxvt-unicode 9.10Marc Lehmann Rxvt-unicode 9.01
6.5
CVSSv2
CVE-2021-33477
rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline.
Eterm Project Eterm 0.9.7Mrxvt Project Mrxvt 0.5.4Rxvt Project Rxvt 2.7.10Rxvt-unicode Project Rxvt-unicode 9.22Fedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook