Поиск уязвимостей
Количество 10
Количество 10
CVE-2024-36138
Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.
CVE-2024-36138
Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.
CVE-2024-36138
Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.
CVE-2024-36138
Bypass incomplete fix of CVE-2024-27980, that arises from improper han ...
GHSA-p2ww-p57h-w5m7
Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.
BDU:2024-05133
Уязвимость программной платформы Node.js, связанная с ошибками при обработке входных данных, позволяющая нарушителю выполнять произвольные команды
SUSE-SU-2024:2542-1
Security update for nodejs18
SUSE-SU-2024:2496-1
Security update for nodejs18
SUSE-SU-2024:2574-1
Security update for nodejs20
SUSE-SU-2024:2543-1
Security update for nodejs20
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-36138 Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. | CVSS3: 8.1 | 1% Низкий | около 2 лет назад |
 | CVE-2024-36138 Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. | CVSS3: 8.1 | 1% Низкий | около 2 лет назад |
 | CVE-2024-36138 Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. | 1% Низкий | 3 месяца назад | |
| CVE-2024-36138 Bypass incomplete fix of CVE-2024-27980, that arises from improper han ... | CVSS3: 8.1 | 1% Низкий | около 2 лет назад |
| GHSA-p2ww-p57h-w5m7 Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. | CVSS3: 8.1 | 1% Низкий | около 2 лет назад |
 | BDU:2024-05133 Уязвимость программной платформы Node.js, связанная с ошибками при обработке входных данных, позволяющая нарушителю выполнять произвольные команды | CVSS3: 9.8 | 1% Низкий | больше 2 лет назад |
 | SUSE-SU-2024:2542-1 Security update for nodejs18 | больше 2 лет назад | ||
| SUSE-SU-2024:2496-1 Security update for nodejs18 | больше 2 лет назад | ||
| SUSE-SU-2024:2574-1 Security update for nodejs20 | больше 2 лет назад | ||
| SUSE-SU-2024:2543-1 Security update for nodejs20 | больше 2 лет назад |
Уязвимостей на страницу