Vendor/product archive

dns-sync_project / dns-sync CVEs

Beta · best-effort

2 CVEs tagged to dns-sync_project / dns-sync — 2 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to dns-sync_project vendor archive

CVE-2017-16100

Published Jun 7, 2018

dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve() method then command injection is possible.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2014-9682

Published Feb 28, 2015

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API fun…

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1