Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 9:19 p.m.•10 views

CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

7CVSS8.2AI score0.01923EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2021/09/02 5:08 p.m.•43 views

Command injection in @diez/generation

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

7CVSS4.2AI score0.01923EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2021/09/02 5:08 p.m.•24 views

GHSA-8C3F-X5F9-6H62 Command injection in @diez/generation

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

3.9CVSS7.5AI score0.01923EPSS
SaveExploits1References4
NVD
NVD
•added 2021/08/17 6:15 p.m.•24 views

CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

7CVSS0.01923EPSS
SaveExploits1References3
OSV
OSV
•added 2021/08/17 6:15 p.m.•17 views

CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

7CVSS7.5AI score0.01923EPSS
SaveExploits1References3
Prion
Prion
•added 2021/08/17 6:15 p.m.•24 views

Command injection

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

6.8CVSS7.5AI score0.01923EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/08/17 6:15 p.m.•10 views

CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

7CVSS7.3AI score0.01923EPSS
SaveExploits1References5
Mend
Mend
•added 2021/08/17 6:00 p.m.•1 views

CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

7CVSS0.01923EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2021/08/17 6:00 p.m.•33 views

CVE-2021-32830

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

3.9CVSS7.8AI score0.01923EPSS
SaveExploits1References3
CVE
CVE
•added 2021/08/17 6:00 p.m.•68 views

CVE-2021-32830

The CVE-2021-32830 entry concerns the @diez/generation npm package, where the locateFont method contains a command injection vulnerability. The vulnerability can lead to remote code execution if untrusted input is passed to the vulnerable method. All versions are reported as vulnerable in the CVE...

7CVSS7.5AI score0.01923EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/08/17 12:00 a.m.•4 views

PT-2021-19962

Name of the Vulnerable Software and Affected Versions @diez/generation affected versions not specified Description The @diez/generation npm package has a command injection vulnerability in its locateFont method. This issue may lead to remote code execution if a client of the library calls the...

7CVSS0.01923EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/17 12:00 a.m.•4 views

CVE-2021-32830: Improper Neutralization of Special Elements used in an OS Command

The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection vulnerability. Clients of the @diez/generation library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This issue may lead...

7CVSS6.2AI score0.01923EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
•added 2015/07/14 4:37 p.m.•22 views

diez-de.su XSS vulnerability

Vulnerable URL: http://diez-de.su/poisk.php?a=0categories=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch...

6.4AI score
SaveExploits0
Rows per page
Query Builder