Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 44

Export CSV
CVE-2022-48337

emacs: command execution via shell metacharacters

GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the "etags -u *" command (suggested in the etags documentation) in a situation where the current working directory has contents that depend on untrusted input.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Debian Gnu Redhat
Products
Debian Linux Emacs Enterprise Linux and 1 more
CVE-2023-27986

emacs: Emacs Lisp code injection via a crafted mailto URI

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto: URI with unescaped double-quote characters. It is fixed in 29.0.90.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Emacs
CVE-2023-27985

emacs: Shell command injection via a crafted mailto URI

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Emacs
CVE-2023-2491

emacs: Regression of CVE-2023-28617 fixes in the Red Hat Enterprise Linux

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Gnu Redhat
Products
Emacs Enterprise Linux Enterprise Linux Eus and 2 more