Lucene search
HackeroneCVELIST:CVE-2017-16100HistoryApr 26, 2018 - 12:00 a.m.
CVE-2017-16100
2018-04-2600:00:00
CWE-94
hackerone
www.cve.org
dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve() method then command injection is possible.
CNA Affected
[
{
"product": "dns-sync node module",
"vendor": "HackerOne",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
]Related
osv
osv
Command Injection in dns-sync
2018-07-18 18:28:02
Command Injection in standard-version
2020-07-13 21:34:59
veracode
veracode
Command Injection
2019-07-10 04:47:02
Arbitrary Command Execution Through Shell Metacharacters In API Arguments
2015-03-02 16:29:41
nvd
nvd
CVE-2017-16100
2018-06-07 02:29:02
cve
cve
CVE-2017-16100
2018-06-07 02:29:02
github
github
Command Injection in dns-sync
2018-07-18 18:28:02
Command Injection in standard-version
2020-07-13 21:34:59
nodejs
nodejs
Command Injection
2017-09-06 23:32:56
prion
prion
Command injection
2018-06-07 02:29:00