Umbraengineering

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Umbraengineering records in CISA KEV

No Umbraengineering vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Ps · all components

TI-2018-11802 CVE-2018-16460 · GHSA-cfhg-9x44-78h2

MEDIUM 47

A command Injection in ps package versions <1.0.0 for Node.js allowed arbitrary commands to be executed when attacker controls the PID.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02856 Published 2018-09-07 Fixed in 1.0.0 CWE-77