Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2021/06/08 11:15 p.m.•83 views

Command Injection in @ronomon/opened

The @ronomon/opened library before 1.5.2 is vulnerable to a command injection vulnerability which would allow a remote attacker to execute commands on the system if the library was used with untrusted input...

10CVSS5.4AI score0.04508EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2021/05/24 4:15 p.m.•32 views

CVE-2021-29300

The @ronomon/opened library before 1.5.2 is vulnerable to a command injection vulnerability which would allow a remote attacker to execute commands on the system if the library was used with untrusted input...

10CVSS0.04508EPSS
SaveExploits1References2
Prion
Prion
•added 2021/05/24 4:15 p.m.•34 views

Command injection

The @ronomon/opened library before 1.5.2 is vulnerable to a command injection vulnerability which would allow a remote attacker to execute commands on the system if the library was used with untrusted input...

10CVSS9.8AI score0.04508EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/05/24 3:42 p.m.•6 views

CVE-2021-29300

The @ronomon/opened library before 1.5.2 is vulnerable to a command injection vulnerability which would allow a remote attacker to execute commands on the system if the library was used with untrusted input...

10CVSS0.04508EPSS
SaveExploits1References4
CVE
CVE
•added 2021/05/24 3:42 p.m.•84 views

CVE-2021-29300

Affected component: @ronomon/opened (Node.js library) prior to version 1.5.2. Root cause: The module is vulnerable to command injection when untrusted input is used to form commands that are executed, enabling an attacker to run arbitrary commands on the host. Impact: Remote code execution risk o...

10CVSS9.8AI score0.04508EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/24 12:00 a.m.•13 views

CVE-2021-29300: Improper Neutralization of Special Elements used in an OS Command

The @ronomon/opened library before 1.5.2 is vulnerable to a command injection vulnerability which would allow a remote attacker to execute commands on the system if the library was used with untrusted input...

10CVSS6.3AI score0.04508EPSS
SaveExploits1References2
Rows per page
Query Builder