@bigab/gulp-testee (>=0.0.1, <=0.0.2), books-fe-polymer-dev-sample (1.0.0) +13 more potentially affected by CVE-2021-23330 via launchpad (>=0.2.1, <=0.7.5)

launchpad NPM version =0.2.1, =0.0.1, =0.3.1, =0.0.1, =0.0.1, =1.0.1, =0.2.0, =0.0.1, =0.0.5, =2.0.15, =1.0.1, =2.0.3, =3.4.2 Source cves: CVE-2021-23330 Source advisory: OSV:GHSA-7H8X-WMQ2-7MFF...

Command injection in launchpad

All versions of package launchpad are vulnerable to Command Injection via stop...

CVE-2021-28117

libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs that are neither https:// nor http:// based on the content of the store.kde.org web site. 5.18.7 is also a fixed version...

Exploit for OS Command Injection in Alleghenycreative Openrepeater

CVE-2019-25024 OpenRepeater ORP / Unauthenticated Command...

CVE-2021-25683

It was discovered that the getstarttime function in data/apport did not properly parse the /proc/pid/stat file from the kernel...

CVE-2021-25684

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...

Remote Code Execution (RCE)

launchpad is vulnerable to remote code execution RCE. The vulnerability exists through execcommand in the stop function...

CVE-2021-23330

All versions of package launchpad are vulnerable to Command Injection via stop...

CVE-2021-23330

All versions of package launchpad are vulnerable to Command Injection via stop...

Command injection

All versions of package launchpad are vulnerable to Command Injection via stop...

CVE-2021-23330

All versions of package launchpad are vulnerable to Command Injection via stop...

CVE-2021-23330 Command Injection

All versions of package launchpad are vulnerable to Command Injection via stop...

CVE-2021-23330

CVE-2021-23330 affects the npm package launchpad . All versions are vulnerable to a Command Injection via the stop function, caused by an insecure use of exec(command) in stop. Documented evidence from multiple sources confirms this vulnerability and its impact. The SNYK entry explicitly states t...

CVE-2021-23330

All versions of package launchpad are vulnerable to Command Injection via stop...

PT-2021-15439

Name of the Vulnerable Software and Affected Versions launchpad versions all Description The issue concerns Command Injection via the stop function. Recommendations For all versions, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2021-23330: Improper Neutralization of Special Elements used in an OS Command

All versions of package launchpad are vulnerable to Command Injection via stop...

Bitovi Launchpad Command Injection Vulnerability

Bitovi Launchpad is a Javscript-based software from Bitovi Canada that provides native browser functionality for Mac Os, Windows, and Linuxlike. A command injection vulnerability exists in all versions of launchpad that allows injection via the stop command...

CVE-2020-26970

When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable. This vulnerability affects Thunderbird...

CVE-2012-0955

software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under python2 and only checked certificates under python3 if a valid certificate bundle was provided. Fix...

Launchpad Software-properties Trust Management Issue Vulnerability

Launchpad Software-properties is a software from the Launchpad organization for managing installed software images on Linux systems. A security vulnerability exists in software-properties versions prior to 0.92, which stems from incorrect TLS certificate validation in softwareproperties ppa.py,...