Lucene search
+L

6339 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/02 12:00 a.m.•22 views

Linux Distros Unpatched Vulnerability : CVE-2026-84837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to...

7.8CVSS5.9AI score0.01303EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/02 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-84233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes...

7CVSS6.5AI score0.00194EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/02 12:00 a.m.•31 views

PT-2026-84801

Name of the Vulnerable Software and Affected Versions rpm affected versions not specified Description A command injection flaw exists in rpm. An attacker can execute arbitrary commands with the privileges of the build user by influencing the path or filename of a tarball processed by the rpmbuild...

7.8CVSS6.3AI score0.01303EPSS
SaveExploits0References9
OSV
OSV
•added 2026/09/01 3:17 p.m.•14 views

DEBIAN-CVE-2026-84233

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS6.5AI score0.00194EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/01 3:17 p.m.•18 views

CVE-2026-84233

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS0.00194EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/01 3:17 p.m.•10 views

AZL-99369 CVE-2026-84233 affecting package rpm 4.18.2-2

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS6.5AI score0.00194EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/01 3:17 p.m.•20 views

CVE-2026-84233

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS5.9AI score0.00194EPSS
SaveExploits0References2
osv-ubuntu
osv-ubuntu
•added 2026/09/01 3:17 p.m.•17 views

UBUNTU-CVE-2026-84233

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS6.5AI score0.00194EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/01 2:53 p.m.•72 views

CVE-2026-84233

rpm is vulnerable to command execution via macro expansion in rpmuncompress -x. A local attacker can supply a specially crafted .gem filename containing RPM macro syntax ; when a user or automated workflow invokes rpmuncompress -x on that file, the macro expansion occurs during command constructi...

7CVSS6.5AI score0.00194EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/01 2:53 p.m.•18 views

EUVD-2026-69249

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS6.5AI score0.00194EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/01 2:53 p.m.•13 views

CVE-2026-84233 Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS6.5AI score0.00194EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/09/01 2:53 p.m.•20 views

CVE-2026-84233

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS6.5AI score0.00194EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/09/01 2:53 p.m.•55 views

CVE-2026-84233 Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS0.00194EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/01 2:53 p.m.•15 views

CVE-2026-84233

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS6.5AI score0.00194EPSS
SaveExploits0References3
osv-rhsa
osv-rhsa
•added 2026/09/01 10:28 a.m.•12 views

RHSA-2026:61737 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

5.9CVSS5.6AI score0.00358EPSS
SaveExploits0References12
RedHat Linux
RedHat Linux
•added 2026/09/01 5:42 a.m.•12 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: valkey: valkey-9.0.6-0.1.hum1 aarch64, x8664 valkey-compat-redis-9.0.6-0.1.hum1 noarch valkey-compat-redis-devel-9.0.6-0.1.hum1 noarch valkey-devel-9.0.6-0.1.hum1 aarch64, x8664...

8.8CVSS5.5AI score0.0117EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•6 views

CVE-2026-84233: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS6.5AI score0.00194EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•5 views

CVE-2026-84233: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS6.5AI score0.00194EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•19 views

PT-2026-84293

Name of the Vulnerable Software and Affected Versions rpm affected versions not specified Description A flaw exists in the rpmuncompress -x command where the command line is constructed using the input filename. A local attacker can provide a specially crafted .gem filename containing RPM macro...

7CVSS6.2AI score0.00194EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•5 views

PT-2026-89939

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS6.5AI score0.00194EPSS
SaveExploits0References2
Rows per page
Query Builder