Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable.
Information Disclosure
Cedet
Emacs
NVD
CVSS 2.0
9.3
EPSS
4.0%
Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Code Injection
Cisco
RCE
Digital Media Manager
NVD
CVSS 2.0
9.0
EPSS
1.2%