Lucene search
+L

15 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 10:00 a.m.•29 views

CVE-2020-7619

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

9.8CVSS8.5AI score0.02175EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2021-1220

Malware in sbrugna...

9.8CVSS8.1AI score0.02175EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2021/05/10 3:59 p.m.•70 views

Command injection in get-git-data

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

9.8CVSS9.2AI score0.02175EPSS
SaveExploits0References4Affected Software1
vulnersOsv
vulnersOsv
•added 2021/05/10 3:59 p.m.•13 views

sizemometer (>=0.0.3, <=0.8.1) potentially affected by CVE-2020-7619 via get-git-data (>=1.0.3, <=1.3.1)

get-git-data NPM version =1.0.3, =0.0.3, =0.8.1 Source cves: CVE-2020-7619 Source advisory: OSV:GHSA-WJ6H-7CHW-X4H2...

9.8CVSS8.6AI score0.02175EPSS
SaveExploits0
osv_ghsa
osv_ghsa
•added 2021/05/10 3:59 p.m.•71 views

GHSA-WJ6H-7CHW-X4H2 Command injection in get-git-data

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

9.8CVSS7.3AI score0.02175EPSS
SaveExploits0References3
Veracode
Veracode
•added 2020/04/03 4:03 a.m.•27 views

OS Command Injection

get-git-data is vulnerable to OS command injection. The vulnerability exists as the values of cmd is not sanitized...

9.8CVSS2.9AI score0.02175EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2020/04/03 12:00 a.m.•27 views

get-git-data injection vulnerability

get-git-data is a package for accessing Git version information. An injection vulnerability exists in get-git-data 1.3.1 and earlier versions, which stems from a lack of proper validation of user input data. A remote attacker can exploit this vulnerability by sending specially crafted parameters ...

9.8CVSS7.8AI score0.02175EPSS
SaveExploits0References1
NVD
NVD
•added 2020/04/02 9:15 p.m.•43 views

CVE-2020-7619

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

9.8CVSS9.7AI score0.02175EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2020/04/02 9:15 p.m.•24 views

CVE-2020-7619

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

9.8CVSS7.4AI score0.02175EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/04/02 9:15 p.m.•10 views

CVE-2020-7619

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

9.8CVSS8.7AI score0.02175EPSS
SaveExploits0References4
Mend
Mend
•added 2020/04/02 8:43 p.m.•2 views

CVE-2020-7619

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

9.8CVSS0.02175EPSS
SaveExploits0References3
CVE
CVE
•added 2020/04/02 8:43 p.m.•94 views

CVE-2020-7619

CVE-2020-7619 affects the Node.js package get-git-data up to version 1.3.1. The issue is a Command Injection vulnerability: user-supplied arguments to get-git-data can lead to arbitrary command execution. Multiple connected sources confirm the vulnerability and link it to the lack of input valida...

9.8CVSS9.6AI score0.02175EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/04/02 12:00 a.m.•4 views

PT-2020-19657

Name of the Vulnerable Software and Affected Versions get-git-data versions prior to 1.3.2 Description The issue allows for Command Injection, where an attacker can inject arbitrary commands as part of the arguments provided to get-git-data. Recommendations For versions prior to 1.3.2, update to...

9.8CVSS0.02175EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/02 12:00 a.m.•5 views

CVE-2020-7619: Improper Neutralization of Special Elements used in an OS Command

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...

9.8CVSS8.2AI score0.02175EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2020/04/02 12:00 a.m.•8 views

sizemometer (>=0.3.0, <=0.8.1) potentially affected by CVE-2020-7619 via get-git-data (>=1.3.0, <=1.3.1)

get-git-data NPM version =1.3.0, =0.3.0, =0.8.1 Source cves: CVE-2020-7619 Source advisory: SNYK:JS-GETGITDATA-564222...

9.8CVSS8.6AI score0.02175EPSS
SaveExploits0
Rows per page
Query Builder