https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 21:16:19 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-21083 cnvd-2020-21083 https://cve.radiocsirt.org/vuln/cnvd-2020-21083 https://cve.radiocsirt.org/vuln/euvd-2026-38022 EUVD-2026-38022 https://cve.radiocsirt.org/vuln/euvd-2026-38022 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7602 <p>node-prompt-here through 1.0.1 allows execution of arbitrary commands. The &#34;runCommand()&#34; is called by &#34;getDevices()&#34; function in file &#34;linux/manager.js&#34;, which is required by the &#34;index. process.env.NM_CLI&#34; in the file &#34;linux/manager.js&#34;. This function is used to construct the argument of function &#34;execSync()&#34;, which can be controlled by users without any sanitization.</p> <p>node-prompt-here through 1.0.1 allows execution of arbitrary commands. The &#34;runCommand()&#34; is called by &#34;getDevices()&#34; function in file &#34;linux/manager.js&#34;, which is required by the &#34;index. process.env.NM_CLI&#34; in the file &#34;linux/manager.js&#34;. This function is used to construct the argument of function &#34;execSync()&#34;, which can be controlled by users without any sanitization.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7602 https://cve.radiocsirt.org/vuln/ghsa-f8fh-8rgm-227h <p><strong>Affected:</strong> npm: node-prompt-here</p> <p>node-prompt-here through 1.0.1 allows execution of arbitrary commands. The `runCommand()` is called by `getDevices()` function in file `linux/manager.js`, which is required by the `index. process.env.NM_CLI` in the file `linux/manager.js`. This function is used to construct the argument of function `execSync()`, which can be controlled by users without any sanitization.</p> <p><strong>Affected:</strong> npm: node-prompt-here</p> <p>node-prompt-here through 1.0.1 allows execution of arbitrary commands. The `runCommand()` is called by `getDevices()` function in file `linux/manager.js`, which is required by the `index. process.env.NM_CLI` in the file `linux/manager.js`. This function is used to construct the argument of function `execSync()`, which can be controlled by users without any sanitization.</p> https://cve.radiocsirt.org/vuln/ghsa-f8fh-8rgm-227h https://cve.radiocsirt.org/vuln/gsd-2020-7602 gsd-2020-7602 https://cve.radiocsirt.org/vuln/gsd-2020-7602