Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 05:33:42 +0000 bdu:2020-04464 https://cve.radiocsirt.org/vuln/bdu:2020-04464 bdu:2020-04464 https://cve.radiocsirt.org/vuln/bdu:2020-04464 cnvd-2020-33770 https://cve.radiocsirt.org/vuln/cnvd-2020-33770 cnvd-2020-33770 https://cve.radiocsirt.org/vuln/cnvd-2020-33770 EUVD-2026-38038 https://cve.radiocsirt.org/vuln/euvd-2026-38038 EUVD-2026-38038 https://cve.radiocsirt.org/vuln/euvd-2026-38038 fkie_cve-2020-7613 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7613 <p>clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the `_is_clamav_binary` function located within `Index.js`. It should be noted that this vulnerability requires a pre-requisite that a folder should be created with the same command that will be chained to execute. This lowers the risk of this issue.</p> <p>clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the `_is_clamav_binary` function located within `Index.js`. It should be noted that this vulnerability requires a pre-requisite that a folder should be created with the same command that will be chained to execute. This lowers the risk of this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7613 GHSA-5v25-xr56-phph — Clamscan vulnerable to command injection https://cve.radiocsirt.org/vuln/ghsa-5v25-xr56-phph <p><strong>Affected:</strong> npm: clamscan</p> <p>clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the `_is_clamav_binary` function located within `Index.js`. It should be noted that this vulnerability requires a pre-requisite that a folder should be created with the same command that will be chained to execute. This lowers the risk of this issue.</p> <p><strong>Affected:</strong> npm: clamscan</p> <p>clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the `_is_clamav_binary` function located within `Index.js`. It should be noted that this vulnerability requires a pre-requisite that a folder should be created with the same command that will be chained to execute. This lowers the risk of this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-5v25-xr56-phph gsd-2020-7613 https://cve.radiocsirt.org/vuln/gsd-2020-7613 gsd-2020-7613 https://cve.radiocsirt.org/vuln/gsd-2020-7613