CVE-2014-9622 on Ubuntu 12.04 LTS (precise) - medium.
Description:
Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open.