Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2020/12/16 7:25 p.m.45 views

Command Injection Vulnerability in systeminformation

Impact command injection vulnerability Patches Problem was fixed with a shell string sanitation fix. Please upgrade to version = 4.31.1 Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetLatency For more information If you have any...

8.8CVSS8.6AI score0.02712EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2020/11/27 8:15 p.m.12 views

CVE-2020-26245

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

9.8CVSS8.3AI score0.01925EPSS
Exploits0References2
Prion
Prion
added 2020/11/27 8:15 p.m.17 views

Command injection

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

7.5CVSS9.1AI score0.01925EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/11/27 7:50 p.m.16 views

CVE-2020-26245 Prototype Pollution leading to Command Injection in systeminformation

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

8.1CVSS9.3AI score0.01925EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2020/10/27 8:40 p.m.52 views

Command Injection in systeminformation

Impact command injection vulnerability Patches Problem was fixed with a shell string sanitation fix. Please upgrade to version = 4.26.2 Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to is.services, is.inetChecksite, si.inetLatency,...

9.8CVSS3.8AI score0.01408EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2020/10/27 8:30 p.m.15 views

GHSA-94XH-2FMC-XF5J systeminformation command injection vulnerability

Impact command injection vulnerability Patches Problem was fixed with a shell string sanitation fix. Please upgrade to version = 4.27.11 Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetChecksite References Are there any links use...

8.8CVSS8.8AI score0.05708EPSS
Exploits1References7
Rows per page
Query Builder