CVE-2020-28453

This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

CVE-2020-28453

This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

CVE-2020-28437

This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js...

Code injection

This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js...

Code injection

This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

CVE-2020-28434

CVE-2020-28434 affects all versions of the gitblame package. The root cause is a command injection in gitblame.js where the file parameter is not properly sanitized before using exec, enabling arbitrary code execution. Public documents corroborate that the vulnerability exists across all versions...

CVE-2020-28434 Command Injection

This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js...

CVE-2020-28437

CVE-2020-28437 affects all versions of the npm package heroku-env. The vulnerability is a command-injection flaw in the get() function, with the injection point in lib/get.js which is required by index.js. This allows unsanitized user input to lead to shell execution. Public sources (Veracode, GH...

CVE-2020-28453

CVE-2020-28453 affects all versions of the npm package npos-tesseract. The vulnerability is a command injection flaw caused by improper sanitization at line 55 in lib/ocr.js, enabling injection via options/image parameters. Public sources describe the issue as critical (CVSS up to 9.8 from NVD) w...

PT-2022-8900 · Unknown · Npos-Tesseract

Name of the Vulnerable Software and Affected Versions: npos-tesseract affected versions not specified Description: The issue affects all versions of the package npos-tesseract. It is a command injection vulnerability with the injection point located in line 55 of the lib/ocr.js file...

PT-2022-8890 · Gitblame · Gitblame

Name of the Vulnerable Software and Affected Versions: gitblame affected versions not specified Description: A command injection issue affects the package. The injection point is located in line 15 in lib/gitblame.js. Recommendations: At the moment, there is no information about a newer version...

Malicious code in lib-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 459880c4c4101dee13b2b38e89cc6c814a4bfd2a354774da5082b185b3478e08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4298 Malicious code in lib-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 459880c4c4101dee13b2b38e89cc6c814a4bfd2a354774da5082b185b3478e08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

sonar-wrapper Command Injection vulnerability

A command injection vulnerability affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js...

GHSA-W868-4576-RV24 ntesseract vulnerable to Command Injection

The package ntesseract before 0.2.9 is vulnerable to Command Injection via lib/tesseract.js...

ntesseract vulnerable to Command Injection

The package ntesseract before 0.2.9 is vulnerable to Command Injection via lib/tesseract.js...

CVE-2020-28443 Command Injection

This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js...

Webmin 安全漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. A security vulnerability exists in versions of Webmin prior to 1.997, which stems from the lack of HTML escaping of UI commands in its software/apt-lib.pl component...

Malicious code in ppreact-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f7534b83a5c4624c7461c8931f2b4ba94277bb3aa0f1fd47d499e7f9a0f70ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5439 Malicious code in ppreact-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f7534b83a5c4624c7461c8931f2b4ba94277bb3aa0f1fd47d499e7f9a0f70ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...