Read the docs

Bwm-ng Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Bwm-ng Project records in CISA KEV

No Bwm-ng Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bwm-ng 2 records MEDIUM

Records

2 records

TI-2023-11353 CVE-2023-26129 · GHSA-8vw3-vxmj-h43w

OS command injection in bwm-ng

Priority MEDIUM 40

All versions of the package bwm-ng are vulnerable to Command Injection due to improper input sanitization in the 'check' function in the bwm-ng.js file.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.01005 Published 2023-05-27 No fix listed CWE-78
TI-2022-01223 CVE-2022-1341 · GHSA-c7j2-w3hr-p277

NULL pointer dereference in bwm-ng

Priority LOW 35

An issue was discovered in in bwm-ng v0.6.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01193 Published 2022-04-18 No fix listed CWE-476
Open these records in search →