Skip to content
OpenAdvisories

Archive

18 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /18 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • High 7.3
    CVE-2021-23379

    Arbitrary Command Injection

    This affects all versions of package portkiller. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.

    portkiller npm
  • Medium 5.6
    CVE-2021-23380

    Arbitrary Command Injection

    This affects all versions of package roar-pidusage. If attacker-controlled user input is given to the stat function of this package on certain operating systems, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_pro…

    roar-pidusage npm
  • High 7.3
    CVE-2021-23381

    Arbitrary Command Injection

    This affects all versions of package killing. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.

    killing npm
  • High 7.3
    CVE-2021-23374

    Arbitrary Command Injection

    This affects all versions of package ps-visitor. If attacker-controlled user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.

    ps-visitor npm
  • High 7.3
    CVE-2021-23375

    Arbitrary Command Injection

    This affects all versions of package psnode. If attacker-controlled user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.

    psnode npm
  • Critical 9.8
    CVE-2021-23376

    Arbitrary Command Injection

    This affects all versions of package ffmpegdotjs. If attacker-controlled user input is given to the trimvideo function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitizat…

    ffmpegdotjs npm
  • Critical 9.8
    CVE-2021-23377

    Arbitrary Command Injection

    This affects all versions of package onion-oled-js. If attacker-controlled user input is given to the scroll function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitizati…

    onion-oled-js npm
  • Critical 9.8
    CVE-2021-23378

    Arbitrary Command Injection

    This affects all versions of package picotts. If attacker-controlled user input is given to the say function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.

    picotts npm