Lucene search
+L

26 matches found

OSV
OSV
•added 2026/07/23 2:06 p.m.•21 views

MINI-R545-FC6C-QWGF

Bulletin has no description...

6.5CVSS4.7AI score0.00408EPSS
SaveExploits0
OSV
OSV
•added 2026/07/17 8:17 p.m.•14 views

DEBIAN-CVE-2026-50289

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...

8.8CVSS5.6AI score0.03557EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:23 p.m.•21 views

CVE-2026-25104

MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability...

7.8CVSS5.8AI score0.00244EPSS
SaveExploits1References1
OSV
OSV
•added 2026/05/28 11:19 p.m.•15 views

ECHO-75D3-8223-1EAF Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

7.7CVSS5.9AI score0.0019EPSS
SaveExploits0References1
Talos
Talos
•added 2026/05/20 12:00 a.m.•29 views

MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability

Summary A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib versions: 26.01. A specially crafted .lxf file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable...

7.8CVSS6.3AI score0.00223EPSS
SaveExploits1
OSV
OSV
•added 2026/05/13 1:16 p.m.•13 views

MINI-8CRR-4MH9-W6CJ

Bulletin has no description...

7.5CVSS5.7AI score0.0138EPSS
SaveExploits0
OSV
OSV
•added 2026/05/13 3:34 a.m.•13 views

CGA-CR3J-6M49-FW86

Bulletin has no description...

7.5CVSS5.7AI score0.00761EPSS
SaveExploits1
OSV
OSV
•added 2026/05/11 10:02 a.m.•15 views

MINI-FRPV-P65M-7WH5

Bulletin has no description...

5.3CVSS5.7AI score0.00148EPSS
SaveExploits0
OSV
OSV
•added 2026/05/11 6:17 a.m.•19 views

MINI-MG57-RFMH-W8GC

Bulletin has no description...

7.5CVSS5.7AI score0.0062EPSS
SaveExploits0
OSV
OSV
•added 2026/03/13 10:46 a.m.•13 views

MINI-GVC2-MWC4-G2RF

Bulletin has no description...

2.5CVSS5.7AI score0.00114EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/02/19 7:48 p.m.•20 views

CVE-2026-26318

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized locate output in versions. Version 5.31.0 fixes the issue...

8.8CVSS5.8AI score0.0127EPSS
SaveExploits1
OSV
OSV
•added 2025/12/16 7:16 p.m.•15 views

UBUNTU-CVE-2025-68154

systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the fsSize function in systeminformation is vulnerable to OS command injection on Windows systems. The optional drive parameter is directly concatenated into a PowerShell command without...

8.1CVSS6.3AI score0.12989EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2023-2512

Malicious code in bioql PyPI...

9.8CVSS9AI score0.02217EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2024/12/20 8:10 p.m.•41 views

CVE-2024-56334

systeminformation is a System and OS information library for node.js. In affected versions SSIDs are not sanitized when before they are passed as a parameter to cmd.exe in the getWindowsIEEE8021x function. This means that malicious content in the SSID can be executed as OS commands. This...

7.8CVSS6.4AI score0.00705EPSS
SaveExploits0
OSV
OSV
•added 2023/12/08 2:15 a.m.•11 views

CVE-2023-43305

An issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

8.2CVSS5.8AI score0.00571EPSS
SaveExploits1References1
Prion
Prion
•added 2023/09/21 6:15 p.m.•25 views

Command injection

systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to wifiConnections,...

7.5CVSS9.7AI score0.02217EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2022/08/10 12:00 a.m.•240 views

NodeJS System Information Library Command Injection (CVE-2021-21315)

Binary data nodejscve-2021-21315.nbin...

7.8CVSS7.3AI score0.90675EPSS
SaveExploits4References4
CNVD
CNVD
•added 2021/05/21 12:00 a.m.•36 views

Unspecified Vulnerability in BMC Remedy 9.1SP3

BMC Software BMC Remedy 9.1SP3 is an application from BMC Software, Inc. It provides off-the-shelf IT Information Library ITIL service support functionality. A security vulnerability exists in BMC Remedy 9.1SP3, which can be exploited by an attacker to run code using a BIRT template...

8.8CVSS7AI score0.0106EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2021/03/01 6:52 p.m.•233 views

Exploit for OS Command Injection in Systeminformation

CVE-2021-21315-systeminformation This is Proof of Concept for...

7.8CVSS7.6AI score0.90675EPSS
SaveExploits4
NVD
NVD
•added 2021/02/16 5:15 p.m.•36 views

CVE-2021-21315

The System Information Library for Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. ...

7.8CVSS0.90675EPSS
SaveExploits4References6
Rows per page
Query Builder