CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2017/11/17 12:29 a.m.•14 views

CVE-2017-1000219

npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user...

9.8CVSS8.1AI score

Exploits0References1

NVD•added 2017/11/17 12:29 a.m.•9 views

CVE-2017-1000219

npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user...

9.8CVSS9.9AI score0.03342EPSS

Exploits1References1

CVE•added 2017/11/17 12:0 a.m.•54 views

CVE-2017-1000219

CVE-2017-1000219 (npm/kyleRoss windows-cpu) : All versions vulnerable to command injection causing remote code execution as the Node.js user. The technical basis is that the package’s findLoad method passes user input directly to the shell without validation, enabling arbitrary commands. Document...

9.8CVSS9.8AI score0.03342EPSS

Exploits1References1Affected Software1