Lucene search
+L

258 matches found

osv_ghsa
osv_ghsa
•added 2022/01/14 9:09 p.m.•19 views

GHSA-64G7-MVW6-V9QJ Improper Privilege Management in shelljs

Impact Output from the synchronous version of shell.exec may be visible to other users on the same system. You may be affected if you execute shell.exec in multi-user Mac, Linux, or WSL environments, or if you execute shell.exec as the root user. Other shelljs functions including the asynchronous...

5.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/01/14 12:00 a.m.•1 views

PT-2022-28205

Name of the Vulnerable Software and Affected Versions shelljs versions prior to 0.8.5 Description The issue affects the synchronous version of the shell.exec function, potentially allowing output to be visible to other users on the same system, particularly in multi-user environments on Mac, Linu...

5.8AI score
SaveExploits0References4
Veracode
Veracode
•added 2022/01/12 9:51 a.m.•28 views

Information Disclosure

shelljs is vulnerable to information disclosure. The vulnerability exists in ShellJS exec function of exec.js because the file permissions have not been locked down which allows an attacker to gain access to sensitive information of file system of the running scripts and crash application...

7.1CVSS2.4AI score0.00427EPSS
SaveExploits1References7Affected Software2
attackerkb
attackerkb
•added 2022/01/11 7:15 a.m.•15 views

CVE-2022-0144

shelljs is vulnerable to Improper Privilege Management...

7.1CVSS7.1AI score0.00427EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2022/01/11 7:15 a.m.•4 views

DEBIAN-CVE-2022-0144

shelljs is vulnerable to Improper Privilege Management...

7.1CVSS7.2AI score0.00427EPSS
SaveExploits1References1
NVD
NVD
•added 2022/01/11 7:15 a.m.•17 views

CVE-2022-0144

shelljs is vulnerable to Improper Privilege Management...

7.1CVSS0.00427EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2022/01/11 7:15 a.m.•21 views

CVE-2022-0144

shelljs is vulnerable to Improper Privilege Management...

7.1CVSS7.1AI score0.00427EPSS
SaveExploits1References5
osv_ubuntu
osv_ubuntu
•added 2022/01/11 7:15 a.m.•13 views

UBUNTU-CVE-2022-0144

shelljs is vulnerable to Improper Privilege Management...

7.1CVSS7.2AI score0.00427EPSS
SaveExploits1References6
Prion
Prion
•added 2022/01/11 7:15 a.m.•25 views

Input validation

shelljs is vulnerable to Improper Privilege Management...

3.6CVSS6.8AI score0.00427EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2022/01/11 6:45 a.m.•3 views

CVE-2022-0144

shelljs is vulnerable to Improper Privilege Management...

7.1CVSS0.00427EPSS
SaveExploits1References7
Debian CVE
Debian CVE
•added 2022/01/11 6:45 a.m.•28 views

CVE-2022-0144

shelljs is vulnerable to Improper Privilege Management...

7.1CVSS3.3AI score0.00427EPSS
SaveExploits1
osv_cve
osv_cve
•added 2022/01/11 6:45 a.m.•23 views

CVE-2022-0144 Improper Privilege Management in shelljs/shelljs

shelljs is vulnerable to Improper Privilege Management...

7.1CVSS7.1AI score
SaveExploits0References4
CVE
CVE
•added 2022/01/11 6:45 a.m.•168 views

CVE-2022-0144

CVE-2022-0144 affects the shelljs package. The vulnerability is described as an Improper Privilege Management issue that could enable a local attacker to gain elevated privileges via shelljs usage on a system where the component is present. The vulnerability is local in scope, with local/privileg...

7.1CVSS7.2AI score0.00427EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/01/11 6:45 a.m.•54 views

CVE-2022-0144 Improper Privilege Management in shelljs/shelljs

shelljs is vulnerable to Improper Privilege Management...

7.1CVSS7.1AI score0.00427EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/11 12:00 a.m.•27 views

shelljs 安全漏洞

shelljs is a portable Windows/Linux/OS X implementation of Unix shell commands based on the Node.js API. A security vulnerability exists in shelljs that stems from improper privilege management and can be exploited by an attacker to gain unauthorized access...

7.1CVSS5.7AI score0.00427EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/11 12:00 a.m.•4 views

CVE-2022-0144: Improper Privilege Management

shelljs is vulnerable to Improper Privilege Management...

7.1CVSS7.9AI score0.00427EPSS
SaveExploits1References6
Huntr
Huntr
•added 2021/12/26 4:49 p.m.•38 views

Improper Privilege Management in shelljs/shelljs

Details If ShellJS scripts running locally are using ShellJS exec function, local users on the filesystem can read the stdout of the running ShellJS process to disclose sensitive information present in the privileged process. This may leak sensitive information present in the privileged process...

3.6CVSS1.5AI score0.00427EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2021/12/26 12:00 a.m.•9 views

PT-2021-7041

Name of the Vulnerable Software and Affected Versions shelljs affected versions not specified Description The issue is related to Improper Privilege Management in the shelljs function exec, which is associated with insufficient access control. Exploitation of this issue may allow an attacker to...

7.1CVSS7.1AI score0.00427EPSS
SaveExploits1References24
Rows per page
Query Builder