Lucene search
+L

26 matches found

osv_mini
osv_mini
•added 2026/07/23 2:06 p.m.•24 views

MINI-R545-FC6C-QWGF

Bulletin has no description...

6.5CVSS5.6AI score0.00408EPSS
SaveExploits0
osv_debian
osv_debian
•added 2026/07/17 8:17 p.m.•23 views

DEBIAN-CVE-2026-50289

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

8.8CVSS6.3AI score0.03557EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:23 p.m.•23 views

CVE-2026-25104

MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability...

7.8CVSS6.1AI score0.00244EPSS
SaveExploits1References1
osv_echo
osv_echo
•added 2026/05/28 11:19 p.m.•17 views

ECHO-75D3-8223-1EAF Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

7.7CVSS5.7AI score0.00142EPSS
SaveExploits0References1
Talos
Talos
•added 2026/05/20 12:00 a.m.•35 views

MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability

Summary A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib versions: 26.01. A specially crafted .lxf file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable...

7.8CVSS7AI score0.00223EPSS
SaveExploits1
osv_mini
osv_mini
•added 2026/05/13 1:16 p.m.•14 views

MINI-8CRR-4MH9-W6CJ

Bulletin has no description...

7.5CVSS7.1AI score0.01163EPSS
SaveExploits0
osv_cga
osv_cga
•added 2026/05/13 3:34 a.m.•15 views

CGA-CR3J-6M49-FW86

Bulletin has no description...

7.5CVSS7.1AI score0.00761EPSS
SaveExploits4
osv_mini
osv_mini
•added 2026/05/11 10:02 a.m.•16 views

MINI-FRPV-P65M-7WH5

Bulletin has no description...

5.3CVSS6.4AI score0.00148EPSS
SaveExploits0
osv_mini
osv_mini
•added 2026/05/11 6:17 a.m.•19 views

MINI-MG57-RFMH-W8GC

Bulletin has no description...

7.5CVSS7.5AI score0.0062EPSS
SaveExploits0
osv_mini
osv_mini
•added 2026/03/13 10:46 a.m.•18 views

MINI-GVC2-MWC4-G2RF

Bulletin has no description...

2.5CVSS6.6AI score0.00118EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/02/19 7:48 p.m.•27 views

CVE-2026-26318

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized locate output in versions. Version 5.31.0 fixes the issue...

8.8CVSS5.9AI score0.01419EPSS
SaveExploits1
osv_ubuntu
osv_ubuntu
•added 2025/12/16 7:16 p.m.•21 views

UBUNTU-CVE-2025-68154

systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the fsSize function in systeminformation is vulnerable to OS command injection on Windows systems. The optional drive parameter is directly concatenated into a PowerShell command without...

8.1CVSS6.3AI score0.12989EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2023-2512

Malicious code in bioql PyPI...

9.8CVSS7.9AI score0.02217EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2024/12/20 8:10 p.m.•48 views

CVE-2024-56334

systeminformation is a System and OS information library for node.js. In affected versions SSIDs are not sanitized when before they are passed as a parameter to cmd.exe in the getWindowsIEEE8021x function. This means that malicious content in the SSID can be executed as OS commands. This...

7.8CVSS6.4AI score0.00705EPSS
SaveExploits0
osv_cve
osv_cve
•added 2023/12/08 2:15 a.m.•19 views

CVE-2023-43305

An issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

8.2CVSS5.8AI score0.00571EPSS
SaveExploits1References1
Prion
Prion
•added 2023/09/21 6:15 p.m.•32 views

Command injection

systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to wifiConnections,...

7.5CVSS9.7AI score0.02217EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2022/08/10 12:00 a.m.•243 views

NodeJS System Information Library Command Injection (CVE-2021-21315)

Binary data nodejscve-2021-21315.nbin...

7.8CVSS7.3AI score0.90675EPSS
SaveExploits5References4
CNVD
CNVD
•added 2021/05/21 12:00 a.m.•40 views

Unspecified Vulnerability in BMC Remedy 9.1SP3

BMC Software BMC Remedy 9.1SP3 is an application from BMC Software, Inc. It provides off-the-shelf IT Information Library ITIL service support functionality. A security vulnerability exists in BMC Remedy 9.1SP3, which can be exploited by an attacker to run code using a BIRT template...

8.8CVSS7AI score0.0106EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2021/03/01 6:52 p.m.•240 views

Exploit for OS Command Injection in Systeminformation

CVE-2021-21315-systeminformation This is Proof of Concept for...

7.8CVSS7.6AI score0.90675EPSS
SaveExploits5
NVD
NVD
•added 2021/02/16 5:15 p.m.•39 views

CVE-2021-21315

The System Information Library for Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. ...

7.8CVSS0.90675EPSS
SaveExploits5References6
Rows per page
Query Builder