Lucene search
GoogleOSV:GHSA-Q5PQ-PGRV-FH89HistoryOct 24, 2017 - 6:33 p.m.
dns-sync command injection vulnerability
2017-10-2418:33:36
Google
osv.dev
9
0.003 Low
EPSS
Percentile
65.2%
The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function.
Related
cvelist
cvelist
CVE-2014-9682
2015-02-28 01:00:00
prion
prion
Code injection
2015-02-28 01:59:00
cve
cve
CVE-2014-9682
2015-02-28 01:59:01
nvd
nvd
CVE-2014-9682
2015-02-28 01:59:01
github
github
dns-sync command injection vulnerability
2017-10-24 18:33:36
nodejs
nodejs
Command Injection
2016-10-27 16:23:56
veracode
veracode
Arbitrary Command Execution Through Shell Metacharacters In API Arguments
2015-03-02 16:29:41