Lucene search
K

19 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-24664

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00469EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-1341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in getcmdlnoptions function in src/options.c. CVE-2022-1341 Note that Nessus relies ...

7.5CVSS7.3AI score0.00469EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/05/30 2:22 a.m.0 views

SUSE CVE-2023-26129

All versions of the package bwm-ng are vulnerable to Command Injection due to improper input sanitization in the 'check' function in the bwm-ng.js file. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within t...

8.4CVSS7.6AI score0.00548EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2023/05/27 7:10 p.m.6 views

CVE-2023-26129

All versions of the package bwm-ng are vulnerable to Command Injection due to improper input sanitization in the 'check' function in the bwm-ng.js file. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within t...

8.4CVSS7.5AI score0.00548EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2023/05/27 6:30 a.m.18 views

bwm-ng vulnerable to command injection

All versions of the package bwm-ng are vulnerable to Command Injection due to improper input sanitization in the 'check' function in the bwm-ng.js file. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within t...

8.4CVSS7.6AI score0.00548EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2023/05/27 5:15 a.m.7 views

CVE-2023-26129

All versions of the package bwm-ng are vulnerable to Command Injection due to improper input sanitization in the 'check' function in the bwm-ng.js file. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within t...

8.4CVSS8.6AI score0.00548EPSS
Exploits1References1
CVE
CVE
added 2023/05/27 5:0 a.m.40 views

CVE-2023-26129

CVE-2023-26129 affects the node package bwm-ng . The vulnerability is a Command Injection due to improper input sanitization in the check function of the bwm-ng.js file. Exploitation requires the attacker to run Node.js code in the target environment (local access); no user interaction is needed ...

8.4CVSS7.8AI score0.00548EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2023/05/27 12:0 a.m.1 views

bwm-ng 命令注入漏洞

bwm-ng is a small and simple console-based real-time network and disk io bandwidth monitor. A security vulnerability exists in bwm-ng that stems from improper input cleanup and is susceptible to command injection attacks...

8.4CVSS7.5AI score0.00548EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/05/27 12:0 a.m.5 views

PT-2023-20509 · Bwm-Ng · Bwm-Ng

Name of the Vulnerable Software and Affected Versions: bwm-ng affected versions not specified Description: The issue is related to Command Injection due to improper input sanitization in the check function in the bwm-ng.js file. To potentially exploit this, an attacker needs the ability to run...

8.4CVSS7.4AI score0.00548EPSS
Exploits1References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:34 a.m.1 views

SUSE CVE-2022-1341

An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in getcmdlnoptions function in src/options.c...

7.5CVSS7.6AI score0.00469EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2022/05/20 11:21 p.m.26 views

CVE-2022-1341

An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in getcmdlnoptions function in src/options.c...

7.5CVSS3AI score0.00469EPSS
Exploits1References1
Veracode
Veracode
added 2022/04/21 2:12 p.m.20 views

Denial Of Service (DoS)

bwm-ng is vulnerable to denail of service. The vulnerability exists due to an arbitrary null write in getcmdlnoptions function in src/options.c...

7.5CVSS3AI score0.00469EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2022/04/18 5:15 p.m.15 views

CVE-2022-1341

An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in getcmdlnoptions function in src/options.c...

7.5CVSS0.00469EPSS
Exploits1References2
OSV
OSV
added 2022/04/18 5:15 p.m.3 views

DEBIAN-CVE-2022-1341

An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in getcmdlnoptions function in src/options.c...

7.5CVSS7.6AI score0.00469EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2022/04/18 5:15 p.m.23 views

CVE-2022-1341

An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in getcmdlnoptions function in src/options.c...

7.5CVSS3AI score0.00469EPSS
Exploits1
Prion
Prion
added 2022/04/18 5:15 p.m.14 views

Design/Logic Flaw

An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in getcmdlnoptions function in src/options.c...

5CVSS7.6AI score0.00469EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/04/18 5:15 p.m.1 views

UBUNTU-CVE-2022-1341

An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in getcmdlnoptions function in src/options.c...

7.5CVSS5.9AI score0.00469EPSS
Exploits1References4
CVE
CVE
added 2022/04/18 4:20 p.m.48 views

CVE-2022-1341

CVE-2022-1341 concerns the open-source tool bwm-ng v0.6.2 . The issue is an arbitrary null write in the function get_cmdln_options() located in src/options.c. Documented impact: confidentiality/integrity/HAV partial/full considerations are stated as per CVSS metrics (CVSSv3.1 base score 7.5, HIGH...

7.5CVSS7.5AI score0.00469EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2022/04/18 12:0 a.m.5 views

bwm-ng 代码问题漏洞

bwm-ng is a small and simple console-based real-time network and disk io bandwidth monitor. A security vulnerability exists in bwm-ng v0.6.2 src/options.c, which stems from an arbitrary null write in the getcmdlnoptions function in src/options.c. The vulnerability is caused by the presence of an...

7.5CVSS7.3AI score0.00469EPSS
Exploits1References3
Rows per page
Query Builder