CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2023/02/07 4:26 a.m.•36 views

CVE-2022-25853

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization...

7.4CVSS7.9AI score0.01078EPSS

SaveExploits1References3

NVD•added 2023/02/06 5:15 a.m.•22 views

CVE-2022-25853

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization...

7.8CVSS7.7AI score0.01078EPSS

SaveExploits1References2

Vulnrichment•added 2023/02/06 5:00 a.m.•5 views

CVE-2022-25853

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization...

7.4CVSS7.6AI score0.01078EPSS

SaveExploits1References2

Cvelist•added 2023/02/06 5:00 a.m.•27 views

CVE-2022-25853

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization...

7.4CVSS8.1AI score0.01078EPSS

SaveExploits1References2

CVE•added 2023/02/06 5:00 a.m.•89 views

CVE-2022-25853

CVE-2022-25853 affects the npm package semver-tags. The vulnerability is a Command Injection in getGitTagsRemote caused by improper input sanitization. Exploitation details and a Proof-of-Concept exist (Snyk report shows an input payload that triggers code execution). Several trusted feeds (Verac...

7.8CVSS7.8AI score0.01078EPSS

SaveExploits1References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by