Lucene search
+L

226 matches found

OSV
OSV
•added 2026/06/04 8:56 p.m.•21 views

ROOT-APP-NPM-CVE-2025-68154 CVE-2025-68154 in @rootio/systeminformation - Patched by Root

Root has patched CVE-2025-68154 in the @rootio/systeminformation package for Root:npm. Multiple fixed versions available...

8.1CVSS5.4AI score0.12989EPSS
SaveExploits1
OSV
OSV
•added 2026/06/04 8:56 p.m.•21 views

ROOT-APP-NPM-CVE-2026-26280 CVE-2026-26280 in @rootio/systeminformation - Patched by Root

Root has patched CVE-2026-26280 in the @rootio/systeminformation package for Root:npm. Multiple fixed versions available...

8.4CVSS5.8AI score0.01477EPSS
SaveExploits1
OSV
OSV
•added 2026/06/04 8:56 p.m.•15 views

ROOT-APP-NPM-CVE-2026-26318 CVE-2026-26318 in @rootio/systeminformation - Patched by Root

Root has patched CVE-2026-26318 in the @rootio/systeminformation package for Root:npm. Multiple fixed versions available...

8.8CVSS5.4AI score0.0127EPSS
SaveExploits1
OSV
OSV
•added 2026/06/04 8:56 p.m.•24 views

ROOT-APP-NPM-CVE-2026-44724 CVE-2026-44724 in @rootio/systeminformation - Patched by Root

Root has patched CVE-2026-44724 in the @rootio/systeminformation package for Root:npm. Multiple fixed versions available...

7.8CVSS5.8AI score0.01154EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/06/03 12:00 a.m.•22 views

Linux Distros Unpatched Vulnerability : CVE-2024-56334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systeminformation is a System and OS information library for node.js. In affected versions SSIDs are not sanitized when before they are passed as a parameter to...

7.8CVSS7.4AI score0.00705EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/06/03 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-44724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in...

7.8CVSS7.9AI score0.01154EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/06/03 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-26280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the wifiNetworks functio...

8.4CVSS6.4AI score0.01477EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/06/03 12:00 a.m.•27 views

Linux Distros Unpatched Vulnerability : CVE-2025-68154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the fsSize function in systeminformation is vulnerable to OS...

8.1CVSS6.3AI score0.12989EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/06/03 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-26318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized locate output...

8.8CVSS5.9AI score0.0127EPSS
SaveExploits1References3
NVD
NVD
•added 2026/05/27 8:16 p.m.•26 views

CVE-2026-44724

systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. The vulnerable value is obtained...

7.8CVSS0.01154EPSS
SaveExploits0References6
OSV
OSV
•added 2026/05/27 8:16 p.m.•42 views

DEBIAN-CVE-2026-44724

systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. The vulnerable value is obtained...

7.8CVSS7.9AI score0.01154EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/27 8:16 p.m.•18 views

UBUNTU-CVE-2026-44724

systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. The vulnerable value is obtained...

7.8CVSS5.3AI score0.01154EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/27 7:26 p.m.•13 views

CVE-2026-44724 systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name

systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. The vulnerable value is obtained...

7.8CVSS7.9AI score0.01154EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/27 7:26 p.m.•17 views

CVE-2026-44724

systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. The vulnerable value is obtained...

7.8CVSS5.8AI score0.01154EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/05/27 7:26 p.m.•68 views

CVE-2026-44724 systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name

systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. The vulnerable value is obtained...

7.8CVSS0.01154EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/27 7:26 p.m.•12 views

CVE-2026-44724 systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name

systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. The vulnerable value is obtained...

7.8CVSS6AI score
SaveExploits0References8
EUVD
EUVD
•added 2026/05/27 7:26 p.m.•25 views

EUVD-2026-32639

systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. The vulnerable value is obtained...

7.8CVSS5.8AI score0.01154EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/05/27 7:26 p.m.•49 views

CVE-2026-44724

systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. The vulnerable value is obtained...

7.8CVSS7.9AI score0.01154EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•2 views

CVE-2026-44724: Improper Neutralization of Special Elements used in an OS Command

systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. The vulnerable value is obtained...

7.8CVSS5.9AI score0.01154EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/05/13 3:29 p.m.•16 views

NPM: Systeminformation vulnerable to Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name

NPM: Systeminformation vulnerable to Linux command injection in networkInterfaces via unsanitized NetworkManager connection profile name vulnerability discovered by ? in WordPress Npm systeminformation versions = 4.17.0, = 5.31.5...

7.8CVSS5.8AI score0.01154EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder