Lucene search
+L

3 matches found

NVD
NVD
added 2022/08/29 5:15 a.m.23 views

CVE-2022-25644

All versions of package @pendo324/get-process-by-name are vulnerable to Arbitrary Code Execution due to improper sanitization of getProcessByName function...

9.8CVSS0.01244EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/08/29 5:5 a.m.37 views

CVE-2022-25644 Arbitrary Code Execution

All versions of package @pendo324/get-process-by-name are vulnerable to Arbitrary Code Execution due to improper sanitization of getProcessByName function...

9.8CVSS9.9AI score0.01244EPSS
SaveExploits1References2
CVE
CVE
added 2022/08/29 5:5 a.m.68 views

CVE-2022-25644

CVE-2022-25644 affects the npm package @pendo324/get-process-by-name, with all versions vulnerable to Arbitrary Code Execution due to improper sanitization of the getProcessByName function. The root cause is mishandling of input that allows code injection, enabling remote attackers to execute arb...

9.8CVSS9.7AI score0.01244EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder