Lucene search
+L

27 matches found

Veracode
Veracode
added 2020/03/11 8:43 a.m.12 views

Man-in-the-Middle(MitM)

unomi-rest is vulnerable to man-in-the-middle MitM attack. This attack exists because the project dependencies are downloaded over HTTP instead of HTTPS, allowing a Man in the Middle MITM attacker to manipulate the dependencies in the build files and eventually leading to an execution of maliciou...

1.9AI score
SaveExploits0
Gitee
Gitee
added 2020/02/18 9:25 p.m.4 views

AFLplusplus

This is a code repository for AFLplusplus, a tool for fuzz testing and vulnerability discovery. The repository contains various files and directories related to the project, including configuration files, makefiles, and documentation. The repository is organized as follows: .clang-format is a...

7.1AI score
SaveExploits0
Veracode
Veracode
added 2019/06/11 9:44 a.m.9 views

Man-in-the-Middle (MitM)

value-fixture is vulnerable to man-in-the-middle MitM attack. The attack is possible due to the usage of http instead of https leading to insecure uploading of build files and allowing a man-in-the-middle attacker to compromise JARs or other dependencies...

6.5AI score
SaveExploits0
NVD
NVD
added 2019/04/22 11:29 a.m.43 views

CVE-2019-11405

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies...

8.1CVSS8.1AI score0.01198EPSS
SaveExploits1References3
OSV
OSV
added 2019/04/22 11:29 a.m.6 views

CVE-2019-11405

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies...

7.4CVSS7.2AI score
SaveExploits0References3
Cvelist
Cvelist
added 2019/04/21 4:7 p.m.47 views

CVE-2019-11405

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies...

8.1CVSS8.1AI score0.01198EPSS
SaveExploits1References3
PyPA
PyPA
added 2014/11/24 3:59 p.m.8 views

PYSEC-2014-11

pip 1.3 through 1.5.6 allows local users to cause a denial of service prevention of package installation by creating a /tmp/pip-build- file for another user...

2.1CVSS6.4AI score0.00393EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder