|
198931
|
9.8 |
CRITICAL
Network
|
git-add-remote_project
|
git-add-remote
|
git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument.
|
CWE-78
OS Command
|
CVE-2020-7630
|
2024-11-21 14:37 |
2020-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198932
|
9.8 |
CRITICAL
Network
|
install-package_project
|
install-package
|
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.
|
CWE-78
OS Command
|
CVE-2020-7629
|
2024-11-21 14:37 |
2020-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198933
|
9.8 |
CRITICAL
Network
|
install-package_project umount_project
|
install-package umount
|
umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization.
|
CWE-78
OS Command
|
CVE-2020-7628
|
2024-11-21 14:37 |
2020-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198934
|
9.8 |
CRITICAL
Network
|
node-key-sender_project
|
node-key-sender
|
node-key-sender through 1.0.11 is vulnerable to Command Injection. It allows execution of arbitrary commands via the 'arrParams' argument in the 'execute()' function.
|
CWE-78
OS Command
|
CVE-2020-7627
|
2024-11-21 14:37 |
2020-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198935
|
9.8 |
CRITICAL
Network
|
karma-mojo_project
|
karma-mojo
|
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument.
|
CWE-78
OS Command
|
CVE-2020-7626
|
2024-11-21 14:37 |
2020-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198936
|
9.8 |
CRITICAL
Network
|
op-browser_project
|
op-browser
|
op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function.
|
CWE-78
OS Command
|
CVE-2020-7625
|
2024-11-21 14:37 |
2020-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198937
|
9.8 |
CRITICAL
Network
|
effect_project
|
effect
|
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument.
|
CWE-78
OS Command
|
CVE-2020-7624
|
2024-11-21 14:37 |
2020-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198938
|
9.8 |
CRITICAL
Network
|
jscover_project
|
jscover
|
jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument.
|
CWE-78
OS Command
|
CVE-2020-7623
|
2024-11-21 14:37 |
2020-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198939
|
9.8 |
CRITICAL
Network
|
ibm
|
strongloop_nginx_controller
|
strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the '_nginxCmd()' function.
|
CWE-78
OS Command
|
CVE-2020-7621
|
2024-11-21 14:37 |
2020-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198940
|
9.8 |
CRITICAL
Network
|
netease
|
pomelo-monitor
|
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params.
|
CWE-78
OS Command
|
CVE-2020-7620
|
2024-11-21 14:37 |
2020-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|