Lucene search
K

11 matches found

Tenable Nessus
Tenable Nessus
added 2025/02/22 12:0 a.m.7 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : emacs (SUSE-SU-2025:0599-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0599-1 advisory. - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections...

8.8CVSS7.9AI score0.01295EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/02/20 12:0 a.m.12 views

SUSE SLES15 Security Update : emacs (SUSE-SU-2025:0589-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0589-1 advisory. - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections. bsc1237091 Tenable has extracted the...

8.8CVSS7.9AI score0.01295EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2023/03/23 12:0 a.m.20 views

Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2023-134)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-134 advisory. emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry...

7.8CVSS7.5AI score0.00207EPSS
Exploits0References6
OSV
OSV
added 2023/03/09 6:15 a.m.13 views

CVE-2023-27985

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90...

7.8CVSS7.7AI score
Exploits0References5
CVE
CVE
added 2023/03/09 12:0 a.m.91 views

CVE-2023-27985

CVE-2023-27985 affects Emacs up to version 28.2, specifically emacsclient-mail.desktop, where a crafted mailto: URI enables shell command injections due to Desktop Entry Specification noncompliance. The issue is documented as fixed in Emacs 29.0.90. Affected products/versions inferred from multip...

7.8CVSS7.3AI score0.00083EPSS
Exploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/05/03 12:0 a.m.19 views

Debian DSA-3562-1 : tardiff - security update

Several vulnerabilities were discovered in tardiff, a tarball comparison tool. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-0857 Rainer Mueller and Florian Weimer discovered that tardiff is prone to shell command injections via shell...

10CVSS6.9AI score0.03116EPSS
Exploits0References6
Debian
Debian
added 2016/05/01 12:4 p.m.21 views

[SECURITY] [DSA 3562-1] tardiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3562-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 01, 2016 https://www.debian.org/security/faq -...

10CVSS2AI score0.03116EPSS
Exploits0
Debian
Debian
added 2016/05/01 12:4 p.m.27 views

[SECURITY] [DSA 3562-1] tardiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3562-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 01, 2016 https://www.debian.org/security/faq -...

10CVSS8.1AI score0.03116EPSS
Exploits0
OpenVAS
OpenVAS
added 2016/05/01 12:0 a.m.21 views

Debian Security Advisory DSA 3562-1 (tardiff - security update)

Several vulnerabilities were discovered in tardiff, a tarball comparison tool. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-0857 Rainer Mueller and Florian Weimer discovered that tardiff is prone to shell command injections via shell meta-characters...

10CVSS1.4AI score0.03116EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2016/04/30 12:0 a.m.18 views

Debian: Security Advisory (DSA-3562-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.7AI score0.03116EPSS
Exploits0References3
ThreatPost
ThreatPost
added 2012/03/22 8:42 p.m.12 views

IBM Report: Mobile Attacks, Phishing Attacks Mount in 2011

Spam volume is down, there are fewer unpatched software holes and oftware application developers did a better job of writing secure code over the last year. But IBM’s X-Force Trend and Risk Report still found plenty to worry about in 2011, according to a copy of the report released this week...

1AI score
Exploits0References4
Rows per page
Query Builder