CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/23 3:25 a.m.•9 views

CVE-2023-2564

OS Command Injection in GitHub repository sbs20/scanservjs prior to v2.27.0...

10CVSS7.2AI score0.40516EPSS

Exploits1References1

NVD•added 2023/05/07 2:15 p.m.•24 views

CVE-2023-2564

OS Command Injection in GitHub repository sbs20/scanservjs prior to v2.27.0...

10CVSS9.8AI score0.40516EPSS

Exploits1References2

Vulnrichment•added 2023/05/07 12:0 a.m.•10 views

CVE-2023-2564 OS Command Injection in sbs20/scanservjs

OS Command Injection in GitHub repository sbs20/scanservjs prior to v2.27.0...

10CVSS9.8AI score0.40516EPSS

Exploits1References2

CVE•added 2023/05/07 12:0 a.m.•145 views

CVE-2023-2564

CVE-2023-2564 describes an OS Command Injection in sbs20/scanservjs before v2.27.0. The vulnerability arises in the server’s REST APIs for scanning and preview, where arrays of strings in POST bodies are interpolated into shell commands (via Process.spawn/scanimage), allowing an attacker to injec...

10CVSS9.8AI score0.40516EPSS

Exploits1References2Affected Software1