Lucene search
+L

166 matches found

Veracode
Veracode
added 2021/02/15 4:14 a.m.17 views

OS Command Injection

samba-client is vulnerable to OS command injection. The use of process.exec allows an attacker to inject and execute arbitrary OS commands on the host OS...

9.8CVSS4.3AI score0.04831EPSS
Exploits1References6Affected Software1
Github Security Blog
Github Security Blog
added 2021/02/11 8:47 p.m.55 views

Command injection in samba-client

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

9.8CVSS3.1AI score0.04831EPSS
Exploits1References7Affected Software1
OSV
OSV
added 2021/02/11 8:47 p.m.26 views

GHSA-R3J7-X2G5-9GX6 Command injection in samba-client

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

9.8CVSS9.8AI score0.04831EPSS
Exploits1References7
Veracode
Veracode
added 2021/02/11 5:23 a.m.21 views

Remote Code Execution (RCE)

samba-client is vulnerable to remote code execution. The vulnerability exists due to the usage of process.exec which allows command injection...

9.8CVSS3.6AI score0.04831EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2021/02/10 10:15 p.m.35 views

CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

9.8CVSS0.04831EPSS
Exploits1References5
OSV
OSV
added 2021/02/10 10:15 p.m.15 views

CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

9.8CVSS9.8AI score
Exploits0References5
Prion
Prion
added 2021/02/10 10:15 p.m.22 views

Command injection

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

7.5CVSS9.8AI score0.04831EPSS
Exploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/10 10:15 p.m.6 views

CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

9.8CVSS8.4AI score0.04831EPSS
Exploits1References6
Cvelist
Cvelist
added 2021/02/10 9:4 p.m.36 views

CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

10AI score0.04831EPSS
Exploits1References5
CNNVD
CNNVD
added 2021/02/10 12:0 a.m.9 views

Node.js samba-client Command Command Injection Vulnerability

Node.js is an open source, cross-platform JavaScript runtime environment. A command injection vulnerability exists in samba-client for Node.js before version 4.0.0, which stems from the use of process.exec...

9.8CVSS7.3AI score0.04831EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2020/12/09 12:0 a.m.40 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : samba Multiple Vulnerabilities (NS-SA-2020-0072)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has samba packages installed that are affected by multiple vulnerabilities: - A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set i...

9.1CVSS7AI score0.03515EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2020/04/28 3:59 p.m.13 views

samba: smb client vulnerable to filenames containing path separators

A flaw was found in the samba client where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working...

6.5CVSS7.3AI score0.03515EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2020/04/03 2:1 p.m.29 views

CVE-2019-10218

A flaw was found in the samba client where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working...

6.5CVSS3.9AI score0.03515EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/03/31 9:31 p.m.37 views

samba: smb client vulnerable to filenames containing path separators

A flaw was found in the samba client where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working...

6.5CVSS7.3AI score0.03515EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/03/23 1:55 p.m.8 views

samba: smb client vulnerable to filenames containing path separators

A flaw was found in the samba client where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working...

6.5CVSS7.3AI score0.03515EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2016-1031)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.03097EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2017-1315)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9AI score0.21408EPSS
Exploits0References2
NVD
NVD
added 2019/11/06 10:15 a.m.15 views

CVE-2019-10218

A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this...

6.5CVSS5.9AI score0.03515EPSS
Exploits0References9
OSV
OSV
added 2019/11/06 10:15 a.m.39 views

CVE-2019-10218

A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this...

6.5CVSS6.4AI score0.03515EPSS
Exploits0References9
OSV
OSV
added 2019/11/06 10:15 a.m.1 views

DEBIAN-CVE-2019-10218

A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this...

6.5CVSS6.4AI score0.03515EPSS
Exploits0References1
Rows per page
Query Builder