Lucene search
Veracode Vulnerability DatabaseVERACODE:1526HistoryMar 02, 2015 - 4:29 p.m.
Arbitrary Command Execution Through Shell Metacharacters In API Arguments
2015-03-0216:29:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.008 Low
EPSS
Percentile
82.2%
The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function. This vulnerability is a duplicate of CVE-2017-16100.
Related
cvelist
cvelist
CVE-2017-16100
2018-04-26 00:00:00
CVE-2014-9682
2015-02-28 01:00:00
osv
osv
Command Injection in dns-sync
2018-07-18 18:28:02
dns-sync command injection vulnerability
2017-10-24 18:33:36
Command Injection in standard-version
2020-07-13 21:34:59
veracode
veracode
Command Injection
2019-07-10 04:47:02
nvd
nvd
CVE-2017-16100
2018-06-07 02:29:02
CVE-2014-9682
2015-02-28 01:59:01
prion
prion
Code injection
2015-02-28 01:59:00
Command injection
2018-06-07 02:29:00
cve
cve
CVE-2014-9682
2015-02-28 01:59:01
CVE-2017-16100
2018-06-07 02:29:02
nodejs
nodejs
Command Injection
2016-10-27 16:23:56
Command Injection
2017-09-06 23:32:56
github
github
dns-sync command injection vulnerability
2017-10-24 18:33:36
Command Injection in dns-sync
2018-07-18 18:28:02
Command Injection in standard-version
2020-07-13 21:34:59