CVE-2014-3121 on Ubuntu 18.04 LTS (bionic) - medium.
Description:
rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands.