Lucene search

CVE-2016-10575

🗓️ 01 Jun 2018 18:00:29Reported by hackeroneType

Kindlegen versions before 1.1.0 are vulnerable to remote code execution due to insecure binary resource download

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
OSV	GHSA-H7PC-85CG-WMCH Downloads Resources over HTTP in kindlegen	18 Feb 201923:35	–	osv
Node.js	Downloads Resources over HTTP	1 Dec 201619:22	–	nodejs
Veracode	Man In The Middle (MitM)	20 Dec 201603:41	–	veracode
Cvelist	CVE-2016-10575	1 Jun 201818:00	–	cvelist
Prion	Remote code execution	1 Jun 201818:29	–	prion
NVD	CVE-2016-10575	1 Jun 201818:29	–	nvd
Github Security Blog	Downloads Resources over HTTP in kindlegen	18 Feb 201923:35	–	github

Nvd

Vulners

Node

hakatashi kindlegenRange<1.1.0node.js

[
  {
    "product": "kindlegen node module",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "<1.1.0"
      }
    ]
  }
]

Source	Link
nodesecurity	www.nodesecurity.io/advisories/251

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Jun 2018 18:29Current

8.2High risk

Vulners AI Score8.2

CVSS29.3

CVSS38.1

EPSS0.00774