Lucene search
K

1774 matches found

OSV
OSV
added 2025/03/03 5:15 p.m.3 views

AZL-57735 CVE-2025-27423 affecting package vim for versions less than 9.1.1164-1

Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of compressed or uncompressed tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the i...

7.1CVSS7.4AI score0.02083EPSS
Exploits0References1
OSV
OSV
added 2025/03/03 5:15 p.m.0 views

UBUNTU-CVE-2025-27423

Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of compressed or uncompressed tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the i...

7.1CVSS6.3AI score0.02083EPSS
Exploits0References5
AlpineLinux
AlpineLinux
added 2025/03/03 4:30 p.m.16 views

CVE-2025-27423

Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of compressed or uncompressed tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the i...

7.1CVSS7.6AI score0.02083EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/03/03 4:30 p.m.11 views

CVE-2025-27423 Improper Input Validation in Vim

Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of compressed or uncompressed tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the i...

7.1CVSS0.02083EPSS
Exploits0References3
FreeBSD
FreeBSD
added 2025/03/03 12:0 a.m.9 views

vim -- Improper Input Validation in Vim

[email protected] reports: Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of compressed or uncompressed tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the is not...

7.1CVSS7.4AI score0.02083EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/03/02 12:0 a.m.3 views

PT-2025-9524 · Vim +3 · Vim +3

Name of the Vulnerable Software and Affected Versions: Vim versions 9.1.0858 through 9.1.1163 Description: Vim is an open source, command line text editor that is distributed with the tar.vim plugin. This plugin allows easy editing and viewing of compressed or uncompressed tar files. However,...

7.1CVSS5AI score0.02083EPSS
Exploits0References52
Debian
Debian
added 2025/02/27 7:48 a.m.5 views

[BSA-122] Security Update for emacs

Sean Whitton uploaded new packages for emacs which fixed the following security problems: CVE-2024-53920 Several ways to trigger arbitrary code execution were discovered in Emacss support for editing files in its own dialect of Lisp. These include arbitrary code execution upon opening an otherwis...

8.8CVSS7.8AI score0.01295EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/02/22 12:0 a.m.7 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : emacs (SUSE-SU-2025:0599-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0599-1 advisory. - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections...

8.8CVSS7.9AI score0.01295EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/02/20 12:0 a.m.12 views

SUSE SLES15 Security Update : emacs (SUSE-SU-2025:0589-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0589-1 advisory. - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections. bsc1237091 Tenable has extracted the...

8.8CVSS7.9AI score0.01295EPSS
Exploits0References4
OSV
OSV
added 2025/02/19 4:9 p.m.5 views

SUSE-SU-2025:0599-1 Security update for emacs

This update for emacs fixes the following issues: - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections. bsc1237091...

8.8CVSS9.1AI score0.01295EPSS
Exploits0References3
OSV
OSV
added 2025/02/19 10:31 a.m.5 views

SUSE-SU-2025:0589-1 Security update for emacs

This update for emacs fixes the following issues: - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections. bsc1237091...

8.8CVSS9.1AI score0.01295EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2025/02/18 9:36 a.m.1 views

Security update for emacs

This update for emacs fixes the following issues: CVE-2025-1244: improper handling of custom "man" URI schemes allow for shell command injections. bsc1237091 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

7.8CVSS7.4AI score0.01295EPSS
Exploits0References4
OSV
OSV
added 2025/02/18 9:36 a.m.6 views

SUSE-SU-2025:0574-1 Security update for emacs

This update for emacs fixes the following issues: - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections. bsc1237091...

8.8CVSS9.1AI score0.01295EPSS
Exploits0References3
CNVD
CNVD
added 2025/02/17 12:0 a.m.7 views

GNU Emacs OS Command Injection Vulnerability

GNU Emacs is a family of text editors in the American GNU community. GNU Emacs suffers from an operating system command injection vulnerability that stems from mishandling of the custom "man" URI scheme, which can be exploited to execute arbitrary shell commands...

8.8CVSS7.7AI score0.01295EPSS
Exploits0References1
Ubuntu
Ubuntu
added 2025/02/14 10:36 a.m.18 views

USN-7268-1: Apache ActiveMQ vulnerabilities

It was discovered that Apache ActiveMQ incorrectly handled authentication. A remote attacker could possibly use this issue to run arbitrary code. CVE-2022-41678 It was discovered that Apache ActiveMQ incorrectly handled deserialization. A remote attacker could possibly use this issue to run...

10CVSS7.7AI score0.94436EPSS
Exploits33
Debian
Debian
added 2025/02/09 11:55 a.m.81 views

[SECURITY] [DLA 4047-1] sssd security update

Debian LTS Advisory DLA-4047-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin February 09, 2025 https://wiki.debian.org/LTS Package : sssd Version : 2.4.1-2+deb11u1 CVE ID : CVE-2021-3621 CVE-2023-3758 Debian Bug : 992710 1070369 Vulnerabilities were found in sssd...

9.3CVSS6.7AI score0.00384EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/02/05 11:15 p.m.4 views

CVE-2022-32534

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands...

10CVSS7.5AI score0.02832EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:23 a.m.4 views

CVE-2024-1881

AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special elements used in an OS command 'OS Command Injection' due to a flaw in its shell command validation function. Specifically, the vulnerability exists in versions v0.5.0 up to but not...

9.8CVSS9.8AI score0.00828EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 2:33 a.m.5 views

CVE-2024-42360

SequenceServer lets you rapidly set up a BLAST+ server with an intuitive user interface for personal or group use. Several HTTP endpoints did not properly sanitize user input and/or query parameters. This could be exploited to inject and run unwanted shell commands. This vulnerability has been...

9.8CVSS6.7AI score0.01618EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 2:31 a.m.1 views

CVE-2024-42502

Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system...

7.2CVSS7.5AI score0.00237EPSS
Exploits0References1
Rows per page
Query Builder