4 matches found
CVE-2017-1000219
npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user...
9.8CVSS9.9AI score0.04236EPSS
SaveExploits1References1
CVE-2017-1000219
npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user...
9.8CVSS8.1AI score
SaveExploits0References1
CVE-2017-1000219
CVE-2017-1000219 (npm/kyleRoss windows-cpu) : All versions vulnerable to command injection causing remote code execution as the Node.js user. The technical basis is that the package’s findLoad method passes user input directly to the shell without validation, enabling arbitrary commands. Document...
9.8CVSS9.8AI score0.04236EPSS
SaveExploits1References1Affected Software1
20