|
199901
|
9.8 |
CRITICAL
Network
|
sonar-wrapper_project
|
sonar-wrapper
|
This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js.
|
CWE-77
Command Injection
|
CVE-2020-28443
|
2024-11-21 14:22 |
2022-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199902
|
9.8 |
CRITICAL
Network
|
conf-cfg-ini_project
|
conf-cfg-ini
|
This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This …
|
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
|
CVE-2020-28441
|
2024-11-21 14:22 |
2022-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199903
|
9.8 |
CRITICAL
Network
|
deferred-exec_project
|
deferred-exec
|
This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js
|
CWE-77
Command Injection
|
CVE-2020-28438
|
2024-11-21 14:22 |
2022-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199904
|
9.8 |
CRITICAL
Network
|
google-cloudstorage-commands_project
|
google-cloudstorage-commands
|
This affects all versions of package google-cloudstorage-commands.
|
CWE-77
Command Injection
|
CVE-2020-28436
|
2024-11-21 14:22 |
2022-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199905
|
9.8 |
CRITICAL
Network
|
ffmpeg-sdk_project
|
ffmpeg-sdk
|
This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js.
|
CWE-77
Command Injection
|
CVE-2020-28435
|
2024-11-21 14:22 |
2022-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199906
|
7.8 |
HIGH
Local
|
git-archive_project
|
git-archive
|
All versions of package git-archive are vulnerable to Command Injection via the exports function.
|
CWE-77
Command Injection
|
CVE-2020-28422
|
2024-11-21 14:22 |
2022-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199907
|
9.8 |
CRITICAL
Network
|
form
|
form.io
|
A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL. NOTE: the email templating service was …
|
CWE-74
Injection
|
CVE-2020-28246
|
2024-11-21 14:22 |
2022-06-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199908
|
8.8 |
HIGH
Network
|
cgal debian
|
computational_geometry_algorithms_library debian_linux
|
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu…
|
-
|
CVE-2020-28604
|
2024-11-21 14:22 |
2022-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199909
|
8.8 |
HIGH
Network
|
cgal debian
|
computational_geometry_algorithms_library debian_linux
|
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu…
|
-
|
CVE-2020-28603
|
2024-11-21 14:22 |
2022-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199910
|
8.8 |
HIGH
Network
|
cgal debian
|
computational_geometry_algorithms_library debian_linux
|
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu…
|
-
|
CVE-2020-28602
|
2024-11-21 14:22 |
2022-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|