SUSE-SU-2025:0574-1 Security update for emacs

This update for emacs fixes the following issues: - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections. bsc1237091...

SUSE CVE-2025-1244

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect...

CVE-2025-1244

creationtimestamp| type| source ---|---|--- 2025-02-12 15:16:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyhqxduf32a 2025-02-12 15:27:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113991617138204821 2025-02-12 16:48:38+00:00| seen|...

CVE-2025-1244

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect...

CVE-2025-1244 Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect...

RHEL 7 : rhc-worker-script (RHSA-2024:1244)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1244 advisory. The rhc-worker-script packages provide Remote Host Configuration rhc worker for executing an interpreted programming language script on hosts managed...

Dell iDRAC7 Command Injection (CVE-2018-1244)

Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command injection vulnerability in the SNMP agent. A remote authenticated malicious iDRAC user with configuration privileges could potentially exploit this vulnerability to execute arbitrary...

Debian: Security Advisory (DLA-631-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-1244

creationtimestamp| type| source ---|---|--- 2023-03-07 12:13:37+00:00| seen| https://t.me/cibsecurity/59553...

CVE-2023-1244 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

CVE-2023-1244

CVE-2023-1244 describes a stored Cross-site Scripting (XSS) vulnerability in the open-source project answerdev/answer prior to version 1.0.6. The issue arises from handling user input without proper validation/storage, enabling attackers to inject executable scripts via stored data. Documents con...

CVE-2023-1244 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

CVE-2022-1244

creationtimestamp| type| source ---|---|--- 2022-04-05 22:29:07+00:00| seen| https://t.me/cibsecurity/40195...

CVE-2022-1244

CVE-2022-1244 describes a heap-buffer-overflow in the radare2 project (radareorg/radare2) affecting versions prior to 5.6.8. The underlying issue is a heap buffer overflow in the code path used by radare2, with the documented impact being a denial of service. The available connected sources consi...

SUSE: Security Advisory (SUSE-SU-2019:1244-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:1244-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco IOS XR Software for Cisco 8000 and NCS 540 Routers Image Verification Vulnerabilities (cisco-sa-ioxr-l-zNhcGCBt)

According to its self-reported version, the Cisco IOS XR Software is affected by multiple vulnerabilities that allow an authenticated, local attacker to execute unsigned code during the boot process, as follows: - A vulnerability in the GRUB boot loader of Cisco NCS 540 Series Routers, only when...

Huawei EulerOS: Security Advisory for dnsmasq (EulerOS-SA-2021-1244)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1244

Technical details about CVE-2020-1244 are not provided in the supplied documents; no affected products or exploit specifics are disclosed here. Monitor for updates from official advisories.

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2017-1244)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...