Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 7:50 p.m.•21 views

CVE-2021-34080

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10CVSS9AI score0.03306EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2022/06/03 12:00 a.m.•37 views

OS Command injection in ssl-utils

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10CVSS9.8AI score0.03306EPSS
SaveExploits1References3Affected Software1
osv_ghsa
osv_ghsa
•added 2022/06/03 12:00 a.m.•48 views

GHSA-552J-PV39-F3JF OS Command injection in ssl-utils

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10CVSS10AI score0.03306EPSS
SaveExploits1References3
NVD
NVD
•added 2022/06/02 2:15 p.m.•24 views

CVE-2021-34080

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10CVSS0.03306EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/06/02 2:15 p.m.•20 views

CVE-2021-34080

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

9.8CVSS10AI score
SaveExploits0References1
Prion
Prion
•added 2022/06/02 2:15 p.m.•24 views

Command injection

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10CVSS10AI score0.03306EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•19 views

ssl-utils: Operating system command injection vulnerability

ssl-utils is a wrapper for some OpenSSL commands around Node.js. A security vulnerability exists in ssl-utils version 1.0.0, which can be exploited by an attacker to execute arbitrary commands...

10CVSS8.7AI score0.03306EPSS
SaveExploits1References2
Mend
Mend
•added 2022/06/01 2:31 p.m.•8 views

CVE-2021-34080

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10CVSS0.03306EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/06/01 2:31 p.m.•34 views

CVE-2021-34080

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10AI score0.03306EPSS
SaveExploits1References1
CVE
CVE
•added 2022/06/01 2:31 p.m.•82 views

CVE-2021-34080

CVE-2021-34080 describes an OS Command Injection in es128 ssl-utils 1.0.0 for Node.js, where unsanitized shell metacharacters supplied to createCertRequest() and createCert() enable arbitrary command execution. The provided connected documents (Red Hat, Veracode, GitHub advisory GHSA-552J-PV39-F3...

10CVSS10AI score0.03306EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/01 12:00 a.m.•14 views

CVE-2021-34080: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

10CVSS8.5AI score0.03306EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/01 12:00 a.m.•6 views

PT-2022-10314

Name of the Vulnerable Software and Affected Versions es128 ssl-utils version 1.0.0 Description The issue allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions. Recommendations For es128 ssl-utils version...

10CVSS0.03306EPSS
SaveExploits1References5
NVD
NVD
•added 2015/01/10 2:59 a.m.•27 views

CVE-2015-0564

Buffer underflow in the ssldecryptrecord function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service application crash via a crafted packet that is improperly handled during decryption of an SSL...

5CVSS6.2AI score0.02778EPSS
SaveExploits0References12
Rows per page
Query Builder