← Back

Dns Sync

dns-sync

Vendor: Dns Sync Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-16100
1Dns Sync Project
1Dns Sync
Nov 21, 2024
Jun 7, 2018
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve() method then command injection is possible.
CVE-2014-9682
1Dns Sync Project
1Dns Sync
May 6, 2026
Feb 28, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function.