Lucene search
+L

41 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/08 12:00 a.m.•2 views

CVE-2019-10778: Improper Neutralization of Special Elements used in an OS Command

devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the exec function. The variable commonName controlled by user input is used as part of the exec function without any sanitization...

9.8CVSS8.7AI score0.03453EPSS
SaveExploits0References2
Rows per page
Query Builder