Lucene search
+L

248793 matches found

osv_azl
osv_azl
•added 2026/09/22 9:17 p.m.•14 views

AZL-103410 CVE-2026-96269 affecting package emacs 29.4-6

GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it...

7.5CVSS6.4AI score0.00147EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/09/22 9:17 p.m.•15 views

DEBIAN-CVE-2026-96269

GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it...

7.5CVSS6.4AI score0.00147EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/22 9:17 p.m.•17 views

CVE-2026-96269

GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it...

7.5CVSS6.4AI score0.00147EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2026/09/22 9:17 p.m.•15 views

UBUNTU-CVE-2026-96269

GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it...

7.5CVSS6.4AI score0.00147EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/09/22 8:37 p.m.•25 views

Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability

A vulnerability in the Goja JavaScript engine used by Nuclei's javascript: protocol allows arbitrary native code execution on the scanner host when running untrusted JavaScript templates. Affected Component The issue is in the Goja JavaScript runtime embedded in Nuclei's JavaScript protocol...

6.9AI score
SaveExploits0References7Affected Software1
osv_ghsa
osv_ghsa
•added 2026/09/22 8:37 p.m.•23 views

GHSA-VXG7-F2JJ-JMQM Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability

A vulnerability in the Goja JavaScript engine used by Nuclei's javascript: protocol allows arbitrary native code execution on the scanner host when running untrusted JavaScript templates. Affected Component The issue is in the Goja JavaScript runtime embedded in Nuclei's JavaScript protocol...

8.6CVSS6.9AI score
SaveExploits0References7
Snyk
Snyk
•added 2026/09/22 8:36 p.m.•17 views

Arbitrary Code Injection

Overview mcp-atlassian is a The Model Context Protocol MCP Atlassian integration is an open-source implementation that bridges Atlassian products Jira and Confluence with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with...

8.8CVSS6.1AI score0.0053EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/09/22 8:32 p.m.•17 views

CVE-2026-96269

GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it...

7.5CVSS6.4AI score0.00147EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/22 8:32 p.m.•48 views

CVE-2026-96269

GNU Emacs versions 28.1 through 31.1 are vulnerable to arbitrary code execution when a user opens a file. The root cause is an untrusted value of read-symbol-shorthands which negatively impacts the intern and unintern functions. This vulnerability affects the default configuration , requiring no ...

7.5CVSS6.4AI score0.00147EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/22 8:32 p.m.•46 views

CVE-2026-96269

GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it...

7.5CVSS0.00147EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/22 8:32 p.m.•18 views

EUVD-2026-84868

GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it...

7.5CVSS6.4AI score0.00147EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/22 8:32 p.m.•21 views

CVE-2026-96269

GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it...

7.5CVSS6.4AI score0.00147EPSS
SaveExploits0
NVD
NVD
•added 2026/09/22 8:17 p.m.•21 views

CVE-2026-76715

A vulnerability in an administrative component of Analytics and Location Engine ALE is vulnerable to a man-in-the-middle MitM attack. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the affected applian...

7.1CVSS0.00259EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/09/22 8:09 p.m.•27 views

kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()

A flaw was found in the Linux kernel's Bluetooth RFCOMM Radio Frequency Communication subsystem. A race condition in the rfcommconnectind function, specifically during the handling of listener sockets, can lead to a use-after-free vulnerability. A local attacker could exploit this to cause a deni...

8CVSS6.5AI score0.00263EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/22 8:08 p.m.•15 views

CVE-2026-50187

A flaw was found in the dotenv plugin of Oh My Zsh. A remote attacker could craft a malicious .env file containing arbitrary shell commands. When a user changes into a directory containing this file, the dotenv plugin processes it, leading to the execution of these commands with the user's...

8.8CVSS6.3AI score0.00539EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/22 7:17 p.m.•18 views

CVE-2026-95831

Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated wi...

7.8CVSS0.0012EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 7:16 p.m.•21 views

CVE-2026-83963

Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00138EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 7:16 p.m.•18 views

CVE-2026-81998

Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00138EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 7:16 p.m.•16 views

CVE-2026-83962

Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00174EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 7:16 p.m.•18 views

CVE-2026-79906

Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00138EPSS
SaveExploits0References1
Rows per page
Query Builder