CVE-2023-2491

The CVE-2023-2491 entry covers a local-privilege style flaw in GNU Emacs affecting org-babel-execute:latex in ob-latex.el (Org Mode). Attackers could trigger arbitrary command execution via specially crafted file/directory names containing shell metacharacters, stemming from a security regression...

Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: Regression of CVE-2023-28617 fixes in the AlmaLinux CVE-2023-2491 For more details about t...

Oracle Linux 9 : emacs (ELSA-2023-2626)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2626 advisory. 1:27.2-8.1 - Fix etags local command injection vulnerability 2184369 - Fix htmlfontify.el command injection vulnerability 2184368 - Fix ruby-mode.el...

AlmaLinux 9 : emacs (ALSA-2023:2626)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2626 advisory. - GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the...

RHEL 9 : emacs (RHSA-2023:2626)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2626 advisory. GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp,...

Important: Red Hat Security Advisory: emacs security update

An update for emacs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: Regression of CVE-2023-28617 fixes in the AlmaLinux CVE-2023-2491 emacs: command execution...

Debian: Security Advisory (DSA-2310-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2303-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for nodejs16 (SUSE-SU-2022:2491-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-2491

creationtimestamp| type| source ---|---|--- 2022-07-20 16:20:09+00:00| seen| https://t.me/cibsecurity/46647...

CVE-2022-2491

A vulnerability has been found in SourceCodester Library Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file lab.php. The manipulation of the argument Section with the input 1' UNION ALL SELECT...

CVE-2022-2491 SourceCodester Library Management System lab.php sql injection

A vulnerability has been found in SourceCodester Library Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file lab.php. The manipulation of the argument Section with the input 1' UNION ALL SELECT...

CVE-2022-2491

CVE-2022-2491 affects SourceCodester Library Management System 1.0 (lab.php). A SQL injection is triggered by manipulating the Section argument with the input 1' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CONCAT(0x71716b7171,0x546e4444736b7743575a666d4873746a6450616261527a6762794442694650724566414...

Slackware: Security Advisory (SSA:2005-251-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2491-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2491

creationtimestamp| type| source ---|---|--- 2020-12-10 07:33:28+00:00| seen| https://t.me/cibsecurity/18557 2020-12-10 07:36:28+00:00| seen| https://t.me/cibsecurity/18577 2020-12-10 08:25:27+00:00| seen| https://t.me/cibsecurity/18597 2020-12-10 10:25:18+00:00| seen| https://t.me/cibsecurity/186...

CVE-2020-2491

CVE-2020-2491 is a cross-site scripting (XSS) vulnerability in QNAP Photo Station . The CVE applies to QTS/QuTS installations that include Photo Station and can allow remote attackers to inject malicious code via Photo Station components. The included connected documents confirm affected products...

CVE-2018-2491

SAP Fiori Client (Android) is affected by a vulnerability where, when a deep link URL is opened and the log level is set to Debug, the client logs the URL to a log file. If the logged URL contains malicious JavaScript, it can be executed inside the app’s embedded log viewer when a user opens the ...

CVE-2017-2491

CVE-2017-2491 is a Use-After-Free in JavaScriptCore (WebKit) used by Apple Safari on iOS/macOS. The flaw affects the String.replace path in JavaScriptCore, enabling remote code execution via a crafted web page or file. Apple’s advisories for Safari/WebKit updates around Safari 10.1 and iOS 10.3 (...