Lucene search
+L

242 matches found

RedHat Linux
RedHat Linux
added 2023/04/20 1:31 p.m.5 views

emacs: command injection vulnerability in org-mode

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the function org-babel-execute:latex in ob-latex.el can result in arbitrary command execution...

7.8CVSS5.9AI score0.00469EPSS
SaveExploits0References4
Amazon
Amazon
added 2023/04/20 12:0 a.m.27 views

Important: emacs

Issue Overview: org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters. CVE-2023-28617 Affected Packages: emacs Note: This advisory is applicable to Amazon...

7.8CVSS8.1AI score0.00469EPSS
SaveExploits0
Amazon
Amazon
added 2023/04/10 12:0 a.m.5 views

Important: emacs

Issue Overview: org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters. CVE-2023-28617 Affected Packages: emacs Issue Correction: Run dnf update emacs...

7.8CVSS8AI score0.00469EPSS
SaveExploits0
OSV
OSV
added 2023/03/31 11:5 a.m.2 views

OESA-2023-1185 emacs security update

Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a proje...

7.8CVSS7.7AI score0.00469EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2023/03/27 7:0 a.m.4 views

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

...

7.8CVSS7.7AI score0.00469EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2023/03/24 1:7 p.m.32 views

CVE-2023-28617

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the function org-babel-execute:latex in ob-latex.el can result in arbitrary command execution. Mitigation Do not evaluate untrusted Lisp or org-mode code...

7.8CVSS7.7AI score0.00469EPSS
SaveExploits0References3
NVD
NVD
added 2023/03/19 3:15 a.m.23 views

CVE-2023-28617

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

7.8CVSS8AI score0.00469EPSS
SaveExploits0References6
OSV
OSV
added 2023/03/19 3:15 a.m.3 views

DEBIAN-CVE-2023-28617

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

7.8CVSS7.8AI score0.00469EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/19 3:15 a.m.6 views

AZL-25707 CVE-2023-28617 affecting package emacs for versions less than 28.2-5

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

7.8CVSS7.5AI score0.00469EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/03/19 3:15 a.m.30 views

CVE-2023-28617

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

7.8CVSS7.3AI score0.00469EPSS
SaveExploits0References8
Prion
Prion
added 2023/03/19 3:15 a.m.22 views

Design/Logic Flaw

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

4.4CVSS7.8AI score0.00469EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2023/03/19 3:15 a.m.2 views

UBUNTU-CVE-2023-28617

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

7.8CVSS6.1AI score0.00469EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2023/03/19 12:0 a.m.24 views

CVE-2023-28617

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

8.2AI score0.00469EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2023/03/19 12:0 a.m.48 views

CVE-2023-28617

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

7.8CVSS8.2AI score0.00469EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/03/19 12:0 a.m.2 views

GNU Emacs 操作系统命令注入漏洞

GNU Emacs is a family of text editors in the American GNU community. An operating system command injection vulnerability exists in GNU Emacs Org Mode version 9.6.1 and earlier. An attacker can use this vulnerability to execute arbitrary commands via filenames or directory names containing shell...

7.8CVSS7.8AI score0.00469EPSS
SaveExploits0References15
Vulnrichment
Vulnrichment
added 2023/03/19 12:0 a.m.9 views

CVE-2023-28617

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

8AI score0.00469EPSS
SaveExploits0References5
CVE
CVE
added 2023/03/19 12:0 a.m.161 views

CVE-2023-28617

CVE-2023-28617 affects Org-Mode's ob-latex.el in GNU Emacs (pre-9.6.1) where org-babel-execute:latex can be triggered to run attacker-controlled commands if a file or directory name contains shell metacharacters. The issue is a code-injection path via shell metacharacters in filenames, leading to...

7.8CVSS7.9AI score0.00469EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2023/03/19 12:0 a.m.37 views

CVE-2023-28617

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

7.8CVSS8.2AI score0.00469EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2022/07/31 12:0 a.m.7 views

Fedora: Security Advisory for golang-github-niklasfasching-org (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2022/07/30 2:0 a.m.15 views

[SECURITY] Fedora 36 Update: golang-github-niklasfasching-org-1.6.2-3.fc36

Org mode parser with html & pretty printed org rendering...

7.3AI score
SaveExploits0
Rows per page
Query Builder