4173 matches found
Downloads Resources over HTTP in webdriver-launcher
Affected versions of webdriver-launcher insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...
GHSA-R36X-P5PV-9MFX prebuild-lwip downloads Resources over HTTP
Affected versions of prebuild-lwip insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the...
Downloads Resources over HTTP in phantomjs-cheniu
Affected versions of phantomjs-cheniu insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...
GHSA-432J-4FW9-2G6F libsbml downloads Resources over HTTP
Affected versions of libsbml insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...
GHSA-HC94-2WFR-4PWF appium-chromedriver downloads Resources over HTTP
Affected versions of appium-chromedriver insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read items send over HTTP at will. In this case, that includes the chromedriver binary, which may result in remote code execution ...
GHSA-2WRQ-WMQF-8VCC Downloads Resources over HTTP in operadriver
operadriver is a Opera Driver for Selenium. operadriver versions below 0.2.3 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attack...
GHSA-6JX3-RQCX-G3WW Downloads Resources over HTTP in air-sdk
Affected versions of air-sdk insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...
Downloads Resources over HTTP in openframe-glslviewer
Affected versions of openframe-glslviewer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution ...
NetScaler ADC Firmware Release Cycle
NetScaler has announced the following updates to the ADC firmware release cycle. NetScaler ADC Firmware Release Cycle 7 yearwill fall on all versions starting with 14.1 and all subsequent releases. Year 1, Year 2, and Year 3 will have feature releases approximately every 8 weeks. Year 4, Year 5,...
Malicious Package
rrgod is a malicious package designed run arbitrary scripts when installed. All versions of this package is considered malicious and must not be used. The package downloads a malicious file and executes the contents after installation...
Apple Safari Safari Private Browsing Information Disclosure Vulnerability
Apple Safari is a web browser developed by Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems.Safari Private Browsing is one of the privacy browsing components of... An information disclosure vulnerability exists in the handling of downloads in the Safari...
Google Chrome Downloads Command Execution Vulnerability
Google Chrome is a web browser developed by Google.Downloads is one of the download components. A security vulnerability exists in Downloads in versions of Google Chrome prior to 66.0.3359.117, which originates when the program parses documents into HTML files. A remote attacker could exploit thi...
Input validation
In Safari before 11.1, an information leakage issue existed in the handling of downloads in Safari Private Browsing. This issue was addressed with additional validation...
CVE-2018-6110
Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrome to execute scripts via a local non-HTML page...
CVE-2018-6110
Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrome to execute scripts via a local non-HTML page...
Hardcoded credentials
Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrome to execute scripts via a local non-HTML page...
CVE-2018-6110
Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrome to execute scripts via a local non-HTML page...
UBUNTU-CVE-2018-6110
Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrome to execute scripts via a local non-HTML page...
