CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2017/10/24 6:33 p.m.•36 views

GHSA-Q5PQ-PGRV-FH89 dns-sync command injection vulnerability

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function...

10CVSS7.5AI score0.02843EPSS

SaveExploits0References6

Github Security Blog•added 2017/10/24 6:33 p.m.•39 views

dns-sync command injection vulnerability

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function...

10CVSS7.3AI score0.02843EPSS

SaveExploits0References5Affected Software1

Cvelist•added 2015/02/28 1:00 a.m.•40 views

CVE-2014-9682

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function...

7.4AI score0.02843EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2015/02/28 12:00 a.m.•4 views

CVE-2014-9682: Improper Neutralization of Special Elements used in a Command

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function...

10CVSS6.3AI score0.02843EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by