Lucene search
GoogleOSV:CVE-2017-16042HistoryJun 04, 2018 - 7:29 p.m.
CVE-2017-16042
2018-06-0419:29:02
Google
osv.dev
1
Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| node-growl | eq | 1.2.0 | |
| node-growl | eq | 1.1.0 | |
| node-growl | eq | 1.10.1 | |
| node-growl | eq | 1.9.1 | |
| node-growl | eq | 1.9.2 | |
| node-growl | eq | 1.4.0 | |
| node-growl | eq | 1.6.0 | |
| node-growl | eq | 1.5.0 | |
| node-growl | eq | 1.8.1 | |
| node-growl | eq | 1.4.1 |
Related
ubuntucve
ubuntucve
CVE-2017-16042
2018-06-04 00:00:00
redhatcve
redhatcve
CVE-2017-16042
2018-06-05 08:01:16
cve
cve
CVE-2017-16042
2018-06-04 19:29:02
veracode
veracode
Remote Code Execution (RCE)
2017-05-02 11:04:59
prion
prion
Command injection
2018-06-04 19:29:00
nvd
nvd
CVE-2017-16042
2018-06-04 19:29:02
cvelist
cvelist
CVE-2017-16042
2018-04-26 00:00:00
github
github
Growl before 1.10.0 vulnerable to Command Injection
2018-06-08 12:43:43
Command Injection in standard-version
2020-07-13 21:34:59
debiancve
debiancve
CVE-2017-16042
2018-06-04 19:29:02
nodejs
nodejs
Command Injection
2016-09-06 12:49:40
osv
osv
Growl before 1.10.0 vulnerable to Command Injection
2018-06-08 12:43:43
Command Injection in standard-version
2020-07-13 21:34:59
ibm
ibm
nessus
nessus
Splunk Enterprise < 8.1.14, 8.2.0 < 8.2.11, 9.0.0 < 9.0.5 (SVD-2023-0613)
2024-05-02 00:00:00