CVE-2022-21268

CVE-2022-21268 affects Oracle Communications Billing and Revenue Management (BRM), Pipeline Manager component. Affected versions are 12.0.0.3 and 12.0.0.4. The vulnerability allows a low-privilege, logon-authenticated attacker to read a subset of BRM data, indicating a confidentiality impact. CVS...

CVE-2018-21268

creationtimestamp| type| source ---|---|--- 2020-06-25 20:55:30+00:00| seen| https://t.me/cibsecurity/13061 2020-07-01 11:55:36+00:00| seen| https://t.me/cibsecurity/13165 2020-07-01 14:55:31+00:00| seen| https://t.me/cibsecurity/13176...

CVE-2018-21268

The traceroute aka node-traceroute package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character...

CVE-2018-21268

CVE-2018-21268 concerns the node-traceroute package (v1.0.0 and earlier) for Node.js, where remote command injection is possible via the host parameter due to Child.exec() being used, allowing an OS command after a newline. Multiple sources (NVD, Red Hat, GitHub advisories, osv.dev) describe this...

CVE-2018-21268

The traceroute aka node-traceroute package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character...