1270 matches found
emacs: command injection vulnerability in org-mode
A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the function org-babel-execute:latex in ob-latex.el can result in arbitrary command execution...
emacs: command injection vulnerability in org-mode
A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the function org-babel-execute:latex in ob-latex.el can result in arbitrary command execution...
Amazon Linux 2 : emacs (ALAS-2023-2012)
The version of emacs installed on the remote host is prior to 27.2-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2012 advisory. org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a fi...
RHEL 8 : emacs (RHSA-2023:1915)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1915 advisory. GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the...
Amazon Linux AMI : python-babel (ALAS-2023-1720)
It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1720 advisory. Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution. CVE-2021-42771 Tenable has...
Ubuntu 16.04 ESM : Emacs vulnerability (USN-6003-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6003-1 advisory. Xi Lu discovered that Emacs did not properly handle certain inputs. An attacker could possibly use this issue to execute arbitrary commands. Tenable has extracted...
Amazon Linux 2 : babel (ALAS-2023-2010)
The version of babel installed on the remote host is prior to 0.9.6-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2010 advisory. Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via...
Medium: python-babel
Issue Overview: Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution. CVE-2021-42771 Affected Packages: python-babel Issue Correction: Run yum update python-babel or yum upda...
Medium: babel
Issue Overview: Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution. CVE-2021-42771 Affected Packages: babel Note: This advisory is applicable to Amazon Linux 2 AL2 Core...
Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2023-147)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-147 advisory. org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...
Design/Logic Flaw
org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...
CVE-2023-28617
CVE-2023-28617 affects Org-Mode's ob-latex.el in GNU Emacs (pre-9.6.1) where org-babel-execute:latex can be triggered to run attacker-controlled commands if a file or directory name contains shell metacharacters. The issue is a code-injection path via shell metacharacters in filenames, leading to...
SUSE CVE-2018-14470
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babelprintv2...
SUSE CVE-2022-26127
A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babelpacketexamin function in babeld/message.c...
Malicious code in babel-preset-geocaching (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51930a28ac75efda74b85ba2de6a8a191279ea0f3a36f1afa9df7928a9d9aeed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1412 Malicious code in babel-preset-geocaching (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51930a28ac75efda74b85ba2de6a8a191279ea0f3a36f1afa9df7928a9d9aeed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHEL 8 : python38:3.8 and python38-devel:3.8 (RHSA-2022:7581)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7581 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...
SUSE: Security Advisory (SUSE-SU-2022:3590-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 Security Update : python-Babel (SUSE-SU-2022:3590-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3590-1 advisory. - CVE-2021-42771: Fixed relative path traversal bsc1185768. Tenable has extracted the preceding description block directly from the SUSE...