sebhildebrandt systeminformation
15 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-116674 | < 5.33.13 | systeminformation: Prototype pollution in `networkStats()` via the interface name | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-116673 | < 5.33.14 | systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net | LOW 3.3 | 0.1 % | ||
| CVE-2026-116576 | < 5.33.16 | systeminformation: Windows command injection in services() through Unicode quotation marks | HIGH 7.8 | 0.1 % | ||
| CVE-2026-50289 | < 5.31.7 | systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux | HIGH 8.7 | 2.2 % | ||
| CVE-2026-44724 | >= 4.17.0, < 5.31.6 | systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name | HIGH 7.8 | 0.9 % | ||
| CVE-2026-26318 | < 5.31.0 | systeminformation has Command Injection via Unsanitized `locate` Output in `versions()` | HIGH 8.8 | 1.3 % | ||
| CVE-2026-26280 | < 5.30.8 | Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path | HIGH 8.4 | 1.4 % | ||
| CVE-2025-68154 | < 5.27.14 | Command Injection in fsSize() on Windows | HIGH 8.1 | 13 % | ||
| CVE-2024-56334 | < 5.23.7 | Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation | HIGH 7.8 | 0.7 % | ||
| CVE-2023-42810 | >= 5.0.0, < 5.21.7 | systeminformation SSID Command Injection Vulnerability | CRITICAL 9.8 | 2.2 % | ||
| CVE-2020-26300 | < 4.26.2 | Command injection in systeminformation | CRITICAL 9.8 | 1.4 % | ||
| CVE-2021-21388 | < 5.6.4 | Command Injection Vulnerability in systeminformation | CRITICAL 9.8 | 1.9 % | ||
| CVE-2021-21315 | < 5.3.1 | Command Injection Vulnerability | HIGH 7.8 | 91 % | KEV | |
| CVE-2020-26274 | < 4.31.1 | Command Injection Vulnerability in systeminformation | HIGH 8.8 | 2.7 % | ||
| CVE-2020-26245 | < 4.30.5 | Prototype Pollution leading to Command Injection in systeminformation | CRITICAL 9.8 | 2.2 % |