CVE-2022-25926

Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due to improper input sanitization...

Fedora 36 : thunderbird (2022-05bdce3585)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-05bdce3585 advisory. Update to 102.5.0 ; https://www.mozilla.org/en-US/security/advisories/mfsa2022-49/ ; https://www.thunderbird.net/en-US/thunderbird/102.5.0/releasenotes/ ;...

@agoric/access-token (>=0.4.16-dev-23c942c.0, <=0.4.16-dev.0), @agoric/assert (>=0.1.0, <=0.3.15-dev.2) +100 more potentially affected by unknown CVE via ses (>=0.0.1, <=0.15.24)

ses NPM version =0.0.1, =0.4.16-dev-23c942c.0, =0.1.0, =1.2.0, =1.3.0, =0.1.0, =0.10.8-dev.0, =0.2.0, =1.5.1, =0.5.6-dev-f662032.0, =0.0.1, =0.1.1, =0.0.9, =0.1.1, =0.2.0, =0.5.30-dev-fe997f2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WHPX-Q3RQ-W8JC...

Mageia: Security Advisory (MGASA-2022-0362)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-1705 affecting package golang 1.18.3-1

CVE-2022-1705 affecting package golang 1.18.3-1. An upgraded version of the package is available that resolves this issue...

Fedora: Security Advisory for kernel (FEDORA-2022-35c14ba5bb)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

多款Huawei产品缓冲区错误漏洞

Huawei 576up005 HOTA-CM-H-Shark-BD and others are a headset from the Chinese company Huawei Huawei. A security vulnerability exists in several Huawei products. The vulnerability stems from insufficient validation of some parameter inputs, which can be exploited by an attacker to send a...

Ubuntu: Security Advisory (USN-2431-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-4H66-VGHF-XG5X get-npm-package-version Command Injection vulnerability

The package get-npm-package-version before 1.0.7 is vulnerable to Command Injection via the main function in index.js...

@cyber-insight/cyber-scripts (>=1.7.9, <=6.0.0-alpha.4), @cyber.insight/cyber-scripts (>=1.0.0, <=1.0.2) +4 more potentially affected by CVE-2020-7795 via get-npm-package-version (1.0.6)

get-npm-package-version NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on get-npm-package-version and may be impacted: - @cyber-insight/cyber-scripts =1.7.9, =1.0.0, =5.0.20, =1.0.0, =1.0.7 - temp-test-scripts 0.0.30 Source cves:...

CVE-2020-7795

CVE-2020-7795 affects the npm package get-npm-package-version prior to 1.0.7. The vulnerability is a command injection flaw exploited via the main function in index.js, enabling arbitrary code execution. Public sources (e.g., Veracode, PSIRT notes) describe the issue as a command injection with i...

CVE-2020-7795

The package get-npm-package-version before 1.0.7 are vulnerable to Command Injection via main function in index.js...

CVE-2020-7795

The package get-npm-package-version before 1.0.7 are vulnerable to Command Injection via main function in index.js...

CVE-2020-7795: Improper Neutralization of Special Elements used in a Command

The package get-npm-package-version before 1.0.7 are vulnerable to Command Injection via main function in index.js...

get-npm-package-version 命令注入漏洞

get-npm-package-version is a package for hoperyy individual developers. It is used to get the npm package version. A command injection vulnerability exists in get-npm-package-version before 1.0.7, which is caused by command injection via the main function in index.js...

PT-2022-9062 · Unknown · Get-Npm-Package-Version

Name of the Vulnerable Software and Affected Versions: get-npm-package-version versions prior to 1.0.7 Description: The issue concerns Command Injection via the main function in index.js. Recommendations: For versions prior to 1.0.7, update to version 1.0.7 or later to resolve the issue. As a...

CVE-2020-28438

This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js...

Command injection

This affects all versions of package google-cloudstorage-commands...

CVE-2022-2207 affecting package vim for versions less than 8.2.5172-1

CVE-2022-2207 affecting package vim for versions less than 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21479 affecting package mysql for versions less than 8.0.29-1

CVE-2022-21479 affecting package mysql for versions less than 8.0.29-1. An upgraded version of the package is available that resolves this issue...