Read Time:3 Second
This affects all versions of package monorepo-build.
Category Archives: Advisories
CVE-2020-28424
CVE-2020-28425
CVE-2020-28433
CVE-2020-28434
Read Time:6 Second
This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js.
CVE-2020-28437
Read Time:7 Second
This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.
CVE-2020-28451
CVE-2020-28453
Read Time:6 Second
This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js.
CVE-2020-7795
Read Time:6 Second
The package get-npm-package-version before 1.0.7 are vulnerable to Command Injection via main function in index.js.
Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution
Read Time:25 Second
Multiple vulnerabilities have been discovered in Google Android OS, the most severe of which could allow for remote code execution. Android is an operating system developed by Google for mobile devices, including, but not limited to, smartphones, tablets, and watches. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution. Depending on the privileges associated with the exploited component, an attacker could then install programs; view, change, or delete data; or create new accounts with full rights.