Lucene search
+L

12234 matches found

OSV
OSV
•added 2021/02/16 7:35 a.m.•14 views

ALBA-2021:0555 samba bug fix and enhancement update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Bug Fixes and Enhancements: DFS links broken in 4.12 BZ1903555...

7.1AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2021/02/16 7:35 a.m.•28 views

samba bug fix and enhancement update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Bug Fixes and Enhancements: DFS links broken in 4.12 BZ1903555...

4AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/02/16 12:00 a.m.•3 views

PT-2021-1008

Name of the Vulnerable Software and Affected Versions: Samba versions 4.12 Description: Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and vario...

5.8AI score
SaveExploits0References1
Veracode
Veracode
•added 2021/02/15 4:14 a.m.•25 views

OS Command Injection

samba-client is vulnerable to OS command injection. The use of process.exec allows an attacker to inject and execute arbitrary OS commands on the host OS...

9.8CVSS4.3AI score0.04831EPSS
SaveExploits1References6Affected Software1
Github Security Blog
Github Security Blog
•added 2021/02/11 8:47 p.m.•62 views

Command injection in samba-client

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

9.8CVSS3.1AI score0.04831EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2021/02/11 8:47 p.m.•39 views

GHSA-R3J7-X2G5-9GX6 Command injection in samba-client

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

9.8CVSS9.8AI score0.04831EPSS
SaveExploits1References7
Veracode
Veracode
•added 2021/02/11 5:23 a.m.•25 views

Remote Code Execution (RCE)

samba-client is vulnerable to remote code execution. The vulnerability exists due to the usage of process.exec which allows command injection...

9.8CVSS3.6AI score0.04831EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2021/02/10 10:15 p.m.•42 views

CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

9.8CVSS0.04831EPSS
SaveExploits1References5
OSV
OSV
•added 2021/02/10 10:15 p.m.•19 views

CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

9.8CVSS9.8AI score
SaveExploits0References5
Prion
Prion
•added 2021/02/10 10:15 p.m.•30 views

Command injection

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

7.5CVSS9.8AI score0.04831EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2021/02/10 10:15 p.m.•13 views

CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

9.8CVSS8.4AI score0.04831EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2021/02/10 9:04 p.m.•47 views

CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

10AI score0.04831EPSS
SaveExploits1References5
CVE
CVE
•added 2021/02/10 9:04 p.m.•107 views

CVE-2021-27185

The CVE-2021-27185 vulnerability affects the samba-client package for Node.js, where command injection is possible due to the use of process.exec in versions before 4.0.0. The issue enables an attacker to inject and execute arbitrary OS commands on the host via the Samba client functionality. The...

9.8CVSS9.7AI score0.04831EPSS
SaveExploits1References5Affected Software1
Mend
Mend
•added 2021/02/10 9:04 p.m.•2 views

CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

9.8CVSS0.04831EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/10 12:00 a.m.•8 views

CVE-2021-27185: Improper Neutralization of Special Elements used in a Command

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

9.8CVSS5.9AI score0.04831EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/02/10 12:00 a.m.•3 views

PT-2021-17304

Name of the Vulnerable Software and Affected Versions: samba-client versions prior to 4.0.0 Description: The issue allows command injection due to the use of process.exec. This is a problem in the samba-client package for Node.js. Recommendations: For versions prior to 4.0.0, update to version...

9.8CVSS5.7AI score0.04831EPSS
SaveExploits1References14
CNNVD
CNNVD
•added 2021/02/10 12:00 a.m.•18 views

Node.js samba-client Command Command Injection Vulnerability

Node.js is an open source, cross-platform JavaScript runtime environment. A command injection vulnerability exists in samba-client for Node.js before version 4.0.0, which stems from the use of process.exec...

9.8CVSS7.3AI score0.04831EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2021/02/05 12:00 a.m.•38 views

RHEL 6 : Storage Server (RHSA-2015:0257)

Updated samba packages that fix one security issue are now available for Red Hat Storage 2.1. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CVE...

10CVSS8.1AI score0.87591EPSS
SaveExploits7References4
OpenVAS
OpenVAS
•added 2021/02/05 12:00 a.m.•37 views

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1229)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.2AI score0.0154EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/02/05 12:00 a.m.•9 views

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2021-1183)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS6.5AI score0.00652EPSS
SaveExploits1References2
Rows per page
Query Builder