Lucene search
Veracode Vulnerability DatabaseVERACODE:36844HistoryAug 30, 2022 - 5:44 a.m.
Remote Code Execution
2022-08-3005:44:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
remote code execution
improper input sanitization
vulnerable software
0.005 Low
EPSS
Percentile
75.9%
@pendo324/get-process-by-name is vulnerable to remote code execution. The vulnerability exists due to the improper sanitizations of user input passed to the getProcessByName function, which allows remote attackers to inject and execute malicious code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @pendo324/get-process-by-name | le | 1.0.1 | |
| @pendo324/get-process-by-name | le | 1.0.1 |
Related
github
github
@pendo324/get-process-by-name are vulnerable to Arbitrary Code Execution
2022-08-29 20:06:55
nvd
nvd
CVE-2022-25644
2022-08-29 05:15:08
prion
prion
Design/Logic Flaw
2022-08-29 05:15:00
cvelist
cvelist
CVE-2022-25644 Arbitrary Code Execution
2022-08-29 00:00:00
cve
cve
CVE-2022-25644
2022-08-29 05:15:08
osv
osv
@pendo324/get-process-by-name are vulnerable to Arbitrary Code Execution
2022-08-29 20:06:55