Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2020/12/16 7:25 p.m.•58 views

Command Injection Vulnerability in systeminformation

Impact command injection vulnerability Patches Problem was fixed with a shell string sanitation fix. Please upgrade to version = 4.31.1 Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetLatency For more information If you have any...

8.8CVSS8.6AI score0.02745EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2020/11/27 8:15 p.m.•33 views

CVE-2020-26245

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

9.8CVSS8.3AI score0.02229EPSS
SaveExploits0References2
Prion
Prion
•added 2020/11/27 8:15 p.m.•27 views

Command injection

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

7.5CVSS9.1AI score0.02229EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/11/27 7:50 p.m.•41 views

CVE-2020-26245 Prototype Pollution leading to Command Injection in systeminformation

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

8.1CVSS9.3AI score0.02229EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2020/10/27 8:40 p.m.•68 views

Command Injection in systeminformation

Impact command injection vulnerability Patches Problem was fixed with a shell string sanitation fix. Please upgrade to version = 4.26.2 Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to is.services, is.inetChecksite, si.inetLatency,...

9.8CVSS3.8AI score0.01407EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2020/10/27 8:30 p.m.•59 views

GHSA-94XH-2FMC-XF5J systeminformation command injection vulnerability

Impact command injection vulnerability Patches Problem was fixed with a shell string sanitation fix. Please upgrade to version = 4.27.11 Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetChecksite References Are there any links use...

8.8CVSS8.8AI score0.06749EPSS
SaveExploits1References7
CNVD
CNVD
•added 2017/06/21 12:00 a.m.•9 views

Linux Kernel Parameter and Environment String Size Limit Bypass Vulnerability

Linux kernel is an open source operating system. Linux kernel suffers from a memory corruption vulnerability that allows local attackers to bypass restrictions by submitting special requests using the vulnerability...

7.8CVSS6.7AI score0.00936EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/08/05 12:00 a.m.•6 views

CVE-2003-0646: Undefined Security Weakness

Multiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and Damage Cleanup Server 1.0, allow remote attackers to execute arbitrary code via long parameter strings...

7.5CVSS6.7AI score0.02632EPSS
SaveExploits0References1
Rows per page
Query Builder