Lucene search
+L

32 matches found

Github Security Blog
Github Security Blog
added 2021/04/06 5:30 p.m.58 views

Command Injection Vulnerability in systeminformation

Impact command injection vulnerability Patches Problem was fixed with a parameter check. Please upgrade to version = 5.6.4 Workarounds If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency, si.inetChecksite, si.services, si.processLoad ... do onl...

9.8CVSS4.3AI score0.01854EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2021/02/16 5:15 p.m.32 views

CVE-2021-21315

The System Information Library for Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. ...

7.8CVSS0.90675EPSS
SaveExploits4References6
Prion
Prion
added 2021/02/16 5:15 p.m.32 views

Command injection

The System Information Library for Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. ...

4.6CVSS7.8AI score0.90675EPSS
SaveExploits4References5Affected Software2
Vulnrichment
Vulnrichment
added 2021/02/16 5:00 p.m.16 views

CVE-2021-21315 Command Injection Vulnerability

The System Information Library for Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. ...

7.1CVSS7.9AI score0.90675EPSS
SaveExploits4References5
Cvelist
Cvelist
added 2021/02/16 5:00 p.m.37 views

CVE-2021-21315 Command Injection Vulnerability

The System Information Library for Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. ...

7.1CVSS8.1AI score0.90675EPSS
SaveExploits4References5
OSV
OSV
added 2021/02/16 4:51 p.m.58 views

GHSA-2M8V-572M-FF2V Command Injection Vulnerability

Impact command injection vulnerability Patches Problem was fixed with a parameter check. Please upgrade to version = 5.3.1 Workarounds If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency, si.inetChecksite, si.services, si.processLoad ... do onl...

7.8CVSS7.3AI score0.90675EPSS
SaveExploits4References9
Github Security Blog
Github Security Blog
added 2021/02/16 4:51 p.m.97 views

Command Injection Vulnerability

Impact command injection vulnerability Patches Problem was fixed with a parameter check. Please upgrade to version = 5.3.1 Workarounds If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency, si.inetChecksite, si.services, si.processLoad ... do onl...

7.8CVSS4.7AI score0.90675EPSS
SaveExploits4References9Affected Software1
NVD
NVD
added 2020/12/16 8:15 p.m.19 views

CVE-2020-26274

In systeminformation npm package before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix...

8.8CVSS7.3AI score0.02712EPSS
SaveExploits0References3
OSV
OSV
added 2020/12/16 8:15 p.m.24 views

CVE-2020-26274

In systeminformation npm package before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix...

8.8CVSS9AI score
SaveExploits0References3
Prion
Prion
added 2020/12/16 8:15 p.m.16 views

Command injection

In systeminformation npm package before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix...

7.5CVSS9AI score0.02712EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2020/12/16 7:30 p.m.27 views

CVE-2020-26274 Command Injection Vulnerability in systeminformation

In systeminformation npm package before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix...

6.4CVSS9AI score0.02712EPSS
SaveExploits0References3
OSV
OSV
added 2020/10/27 8:30 p.m.53 views

GHSA-94XH-2FMC-XF5J systeminformation command injection vulnerability

Impact command injection vulnerability Patches Problem was fixed with a shell string sanitation fix. Please upgrade to version = 4.27.11 Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetChecksite References Are there any links use...

8.8CVSS8.8AI score0.05777EPSS
SaveExploits1References7
Rows per page
Query Builder