Lucene search
CVE-2020-26274
systeminformation (npm package) before version 4.31.1 has command injection vulnerability
Show more
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | CVE-2020-26274 | 16 Dec 202020:15 | – | nvd |
 | Command injection | 16 Dec 202020:15 | – | prion |
 | Command Injection | 16 Dec 202019:42 | – | nodejs |
 | OS Command Injection | 28 Oct 202004:03 | – | veracode |
| Command Injection | 17 Dec 202001:00 | – | veracode |
 | CVE-2020-26274 Command Injection Vulnerability in systeminformation | 16 Dec 202019:30 | – | cvelist |
 | Command Injection Vulnerability in systeminformation | 16 Dec 202019:25 | – | osv |
| CVE-2020-26274 | 16 Dec 202020:15 | – | osv |
 | Command Injection Vulnerability in systeminformation | 16 Dec 202019:25 | – | github |
 | Security Bulletin: Vulnerabilities in Node.js and FasterXML jackson-databind affect IBM Spectrum Protect Plus | 9 Feb 202109:58 | – | ibm |
10
Node
[
{
"product": "systeminformation",
"vendor": "sebhildebrandt",
"versions": [
{
"status": "affected",
"version": "< 4.31.1"
}
]
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo16 Dec 2020 20:15Current
7.7High risk
Vulners AI Score7.7
CVSS27.5
CVSS36.4 - 8.8
EPSS0.01389