Lucene search
Veracode Vulnerability DatabaseVERACODE:20748HistoryJul 10, 2019 - 4:47 a.m.
Command Injection
2019-07-1004:47:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.008 Low
EPSS
Percentile
82.2%
dns-sync is vulnerable to command injection. Lack of input validation allows an attacker to submit input into resolve() method, whcih would allow arbitrary command injection on the system.
Related
cvelist
cvelist
CVE-2017-16100
2018-04-26 00:00:00
osv
osv
Command Injection in dns-sync
2018-07-18 18:28:02
Command Injection in standard-version
2020-07-13 21:34:59
nvd
nvd
CVE-2017-16100
2018-06-07 02:29:02
nodejs
nodejs
Command Injection
2017-09-06 23:32:56
prion
prion
Command injection
2018-06-07 02:29:00
github
github
Command Injection in dns-sync
2018-07-18 18:28:02
Command Injection in standard-version
2020-07-13 21:34:59
cve
cve
CVE-2017-16100
2018-06-07 02:29:02
veracode
veracode
Arbitrary Command Execution Through Shell Metacharacters In API Arguments
2015-03-02 16:29:41