GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.8%.
Command Injection
Denial Of Service
SSH
RCE
Apache
+1
NVD
Exploit-DB
CVSS 2.0
10.0
EPSS
86.8%
Threat
6.1
Unspecified vulnerability in IBM Security QRadar SIEM 7.1 MR2 and 7.2 MR2 allows remote attackers to execute arbitrary code via unknown vectors. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.
IBM
RCE
Qradar Security Information And Event Manager
NVD
CVSS 2.0
9.3
EPSS
7.3%