|
196351
|
5.3 |
MEDIUM
Network
|
confinit_project
|
confinit
|
confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.
|
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
|
CVE-2020-7638
|
2024-11-21 14:37 |
2020-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196352
|
5.3 |
MEDIUM
Network
|
class-transformer_project
|
class-transformer
|
class-transformer before 0.3.1 allow attackers to perform Prototype Pollution. The classToPlainFromExist function could be tricked into adding or modifying properties of Object.prototype using a __pr…
|
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
|
CVE-2020-7637
|
2024-11-21 14:37 |
2020-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196353
|
9.8 |
CRITICAL
Network
|
adb-driver_project
|
adb-driver
|
adb-driver through 0.1.8 is vulnerable to Command Injection.It allows execution of arbitrary commands via the command function.
|
CWE-78
OS Command
|
CVE-2020-7636
|
2024-11-21 14:37 |
2020-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196354
|
9.8 |
CRITICAL
Network
|
compass-compile_project
|
compass-compile
|
compass-compile through 0.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via tha options argument.
|
CWE-78
OS Command
|
CVE-2020-7635
|
2024-11-21 14:37 |
2020-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196355
|
9.8 |
CRITICAL
Network
|
heroku-addonpool_project
|
heroku-addonpool
|
heroku-addonpool through 0.1.15 is vulnerable to Command Injection.
|
CWE-78
OS Command
|
CVE-2020-7634
|
2024-11-21 14:37 |
2020-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196356
|
9.8 |
CRITICAL
Network
|
apiconnect-cli-plugins_project
|
apiconnect-cli-plugins
|
apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via the pluginUri argument.
|
CWE-78
OS Command
|
CVE-2020-7633
|
2024-11-21 14:37 |
2020-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196357
|
9.8 |
CRITICAL
Network
|
node-mpv_project
|
node-mpv
|
node-mpv through 1.4.3 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.
|
CWE-78
OS Command
|
CVE-2020-7632
|
2024-11-21 14:37 |
2020-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196358
|
9.8 |
CRITICAL
Network
|
diskusage-ng_project
|
diskusage-ng
|
diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument.
|
CWE-78
OS Command
|
CVE-2020-7631
|
2024-11-21 14:37 |
2020-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196359
|
9.8 |
CRITICAL
Network
|
git-add-remote_project
|
git-add-remote
|
git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument.
|
CWE-78
OS Command
|
CVE-2020-7630
|
2024-11-21 14:37 |
2020-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196360
|
9.8 |
CRITICAL
Network
|
install-package_project
|
install-package
|
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.
|
CWE-78
OS Command
|
CVE-2020-7629
|
2024-11-21 14:37 |
2020-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|