Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2023-28617

emacs: command injection vulnerability in org-mode

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Gnu Redhat
Products
Org Mode Enterprise Linux Rhel Aus and 3 more
CVE-2024-30202

emacs: arbitrary Lisp code is evaluated as part of turning on Org mode

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23.

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Emacs Org Mode
CVE-2024-30205

emacs: Org mode considers contents of remote files to be trusted

In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Debian Gnu Redhat
Products
Debian Linux Emacs Org Mode and 1 more