GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.8%.
RCE
Denial Of Service
Apache
Command Injection
SSH
+2
NVD
Exploit-DB
CVSS 2.0
10.0
EPSS
86.8%
Threat
6.1
Unspecified vulnerability in IBM Security QRadar SIEM 7.1 MR2 and 7.2 MR2 allows remote attackers to execute arbitrary code via unknown vectors. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.
RCE
IBM
Qradar Security Information And Event Manager
NVD
CVSS 2.0
9.3
EPSS
7.3%