Vendors / Umbraengineering Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now Umbraengineering records in CISA KEV No Umbraengineering vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
A command Injection in ps package versions <1.0.0 for Node.js allowed arbitrary commands to be executed when attacker controls the PID.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02856 · Published 2018-09-07 · Fixed in 1.0.0 CWE-77
Priority MEDIUM 45
The utilities function in all versions <= 0.3.0 of the merge-recursive node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01428 · Published 2018-07-03 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
2 0 0 0 0
