38 matches found
PT-2020-19671
Name of the Vulnerable Software and Affected Versions compass-compile version 0.0.1 Description The issue allows execution of arbitrary commands via the options argument, which is a command injection flaw. Recommendations For version 0.0.1, consider disabling the options argument until a patch is...
PT-2020-19668
Name of the Vulnerable Software and Affected Versions node-mpv versions 1.4.3 and earlier Description The issue allows execution of arbitrary commands via the options argument, enabling command injection. Recommendations For node-mpv versions 1.4.3 and earlier, consider restricting the use of the...
CVE-2020-7629
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...
CVE-2020-7624
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
CVE-2020-7624
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
CVE-2020-7624
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
Command injection
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
Command injection
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...
CVE-2020-7629
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...
CVE-2020-7624
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
PT-2020-19661
Name of the Vulnerable Software and Affected Versions effect versions 1.0.0 through 1.0.4 Description The issue allows execution of arbitrary commands via the options argument, which is vulnerable to Command Injection. Recommendations For versions 1.0.0 through 1.0.4, consider disabling the use o...
PT-2020-19665
Name of the Vulnerable Software and Affected Versions install-package versions 0.4.0 and earlier Description The issue allows execution of arbitrary commands via the options argument, enabling Command Injection attacks. Recommendations For versions 0.4.0 and earlier, consider restricting the use ...
CVE-2020-7629: Improper Neutralization of Special Elements used in an OS Command
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...
CVE-2020-7624: Improper Neutralization of Special Elements used in an OS Command
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
CVE-2020-7603
closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports function in "index.js" can be controlled by users without any sanitization...
CVE-2020-7607: Improper Neutralization of Special Elements used in an OS Command
gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument 'options' of the exports function in 'index.js' can be controlled by users without any sanitization...
PT-2020-19649
Name of the Vulnerable Software and Affected Versions closure-compiler-stream versions 0.1.15 and earlier Description The issue allows execution of arbitrary commands. The argument options of the exports function in index.js can be controlled by users without any sanitization. Recommendations For...
CVE-2020-7603: Improper Neutralization of Special Elements used in an OS Command
closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports function in "index.js" can be controlled by users without any sanitization...