CVE-2016-10692: Undefined Security Weakness

haxeshim haxe shim to deal with coexisting versions. haxeshim downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the network...

CVE-2016-10669: Missing Encryption of Sensitive Data

soci downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote...

CVE-2016-10667: Missing Encryption of Sensitive Data

selenium-portal is a Selenium Testing Framework selenium-portal downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on th...

CVE-2016-10673: Missing Encryption of Sensitive Data

ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application...

CVE-2016-10685: Missing Encryption of Sensitive Data

pk-app-wonderbox is an integration with wonderbox pk-app-wonderbox downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on...

PT-2018-4847

Name of the Vulnerable Software and Affected Versions soci affected versions not specified Description The issue allows for man-in-the-middle MITM attacks due to the software downloading binary resources over HTTP. This could potentially lead to remote code execution RCE if an attacker intercepts...

PT-2018-4871

Name of the Vulnerable Software and Affected Versions pm2-kafka versions affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code executio...

PT-2018-4865

Name of the Vulnerable Software and Affected Versions windows-selenium-chromedriver affected versions not specified Description The issue allows for potential man-in-the-middle MITM attacks due to the insecure download of binary resources over HTTP. This could lead to remote code execution RCE if...

CVE-2016-10684: Missing Encryption of Sensitive Data

healthcenter - IBM Monitoring and Diagnostic Tools health Center agent healthcenter downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if t...

PT-2018-4861

Name of the Vulnerable Software and Affected Versions arcanist affected versions not specified Description The issue allows for man-in-the-middle MITM attacks due to arcanist downloading resources over HTTP. This could potentially lead to remote code execution RCE if an attacker intercepts the...

PT-2018-4862

Name of the Vulnerable Software and Affected Versions healthcenter versions affected versions not specified Description The healthcenter agent downloads binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution RCE if...

PT-2018-4834

Name of the Vulnerable Software and Affected Versions qbs versions affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution RCE ...

PT-2018-4820

Name of the Vulnerable Software and Affected Versions cmake affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution RCE if an...

PT-2018-4817

Name of the Vulnerable Software and Affected Versions redis-srvr versions affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. If an attacker is positioned between the user and...

PT-2018-4830

Name of the Vulnerable Software and Affected Versions prebuild-lwip versions affected versions not specified Description The issue concerns the insecure download of resources over HTTP, making it susceptible to Man-In-The-Middle MITM attacks. In scenarios where an attacker has a privileged networ...

PT-2018-4854

Name of the Vulnerable Software and Affected Versions rs-brightcove affected versions not specified Description The issue allows for a man-in-the-middle MITM attack due to the insecure download of source file resources over HTTP. This could potentially lead to remote code execution RCE if an...

CVE-2016-10688: Missing Encryption of Sensitive Data

Haxe 3 : The Cross-Platform Toolkit a fork from David Mouton's damoebius/haxe-npm haxe3 downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the...

CVE-2016-10694: Missing Encryption of Sensitive Data

alto-saxophone is a module to install and launch Chromedriver for Mac, Linux or Windows. alto-saxophone versions below 2.25.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary...

PT-2018-4833

Name of the Vulnerable Software and Affected Versions clang-extra affected versions not specified Description The issue concerns the clang-extra module's insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote...

PT-2018-4843

Name of the Vulnerable Software and Affected Versions herbivore versions 0.0.3 and below Description The issue concerns a packet sniffing and crafting library that insecurely downloads binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead...