Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:50 p.m.5 views

CVE-2021-34080

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10CVSS8.2AI score0.14688EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2022/06/03 12:0 a.m.20 views

OS Command injection in ssl-utils

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10CVSS9.8AI score0.14688EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2022/06/03 12:0 a.m.16 views

GHSA-552J-PV39-F3JF OS Command injection in ssl-utils

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10CVSS10AI score0.14688EPSS
Exploits1References3
vulnersOsv
vulnersOsv
added 2022/06/03 12:0 a.m.0 views

power-proxy (>=0.0.2 <=0.0.30) potentially affected by CVE-2021-34080 via ssl-utils (=0.3.0)

ssl-utils NPM version =0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ssl-utils and may be impacted: - power-proxy =0.0.2, =0.0.30 Source cves: CVE-2021-34080 Source advisory: OSV:GHSA-552J-PV39-F3JF...

10CVSS7.3AI score0.14688EPSS
Exploits1
OSV
OSV
added 2022/06/02 2:15 p.m.8 views

CVE-2021-34080

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

9.8CVSS10AI score
Exploits0References1
NVD
NVD
added 2022/06/02 2:15 p.m.7 views

CVE-2021-34080

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10CVSS0.14688EPSS
Exploits1References1
Prion
Prion
added 2022/06/02 2:15 p.m.7 views

Command injection

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10CVSS10AI score0.14688EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.1 views

ssl-utils 操作系统命令注入漏洞

ssl-utils is a wrapper for some OpenSSL commands around Node.js. A security vulnerability exists in ssl-utils version 1.0.0, which can be exploited by an attacker to execute arbitrary commands...

10CVSS8.7AI score0.14688EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/06/01 2:31 p.m.11 views

CVE-2021-34080

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10AI score0.14688EPSS
Exploits1References1
CVE
CVE
added 2022/06/01 2:31 p.m.54 views

CVE-2021-34080

CVE-2021-34080 describes an OS Command Injection in es128 ssl-utils 1.0.0 for Node.js, where unsanitized shell metacharacters supplied to createCertRequest() and createCert() enable arbitrary command execution. The provided connected documents (Red Hat, Veracode, GitHub advisory GHSA-552J-PV39-F3...

10CVSS10AI score0.14688EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2015/01/10 2:59 a.m.17 views

CVE-2015-0564

Buffer underflow in the ssldecryptrecord function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service application crash via a crafted packet that is improperly handled during decryption of an SSL...

5CVSS6.2AI score0.00619EPSS
Exploits0References12
Rows per page
Query Builder