PT-2018-4815

Name of the Vulnerable Software and Affected Versions haxe-dev affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution RCE if a...

PT-2018-4846

Name of the Vulnerable Software and Affected Versions libsbml versions affected versions not specified Description The issue arises from libsbml downloading resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution RCE if an...

PT-2018-4867

Name of the Vulnerable Software and Affected Versions windows-iedriver affected versions not specified Description The issue allows for a man-in-the-middle MITM attack due to the insecure download of binary resources over HTTP. This could potentially lead to remote code execution RCE if an attack...

PT-2018-4822

Name of the Vulnerable Software and Affected Versions slimerjs-edge versions affected versions not specified Description The issue allows for a man-in-the-middle MITM attack due to the insecure download of binary resources over HTTP. This could potentially lead to remote code execution RCE if an...

PT-2018-4863

Name of the Vulnerable Software and Affected Versions pk-app-wonderbox affected versions not specified Description The issue allows for potential man-in-the-middle MITM attacks due to the insecure download of binary resources over HTTP. This could lead to remote code execution RCE if an attacker...

PT-2018-4853

Name of the Vulnerable Software and Affected Versions libsbmlsim affected versions not specified Description The issue arises from libsbmlsim downloading binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution RCE i...

PT-2018-4864

Name of the Vulnerable Software and Affected Versions fis-sass-all affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution RCE ...

PT-2018-4831

Name of the Vulnerable Software and Affected Versions xd-testing versions affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code executi...

PT-2018-4819

Name of the Vulnerable Software and Affected Versions node-bsdiff-android versions affected versions not specified Description The issue allows for man-in-the-middle MITM attacks due to insecure resource downloads over HTTP. In scenarios where an attacker has a privileged network position, they c...

PT-2018-4825

Name of the Vulnerable Software and Affected Versions node-air-sdk versions affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code...

PT-2018-4816

Name of the Vulnerable Software and Affected Versions js-given versions prior to 0.0.18 Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. If an attacker is positioned on the network or between the user and...

PT-2018-4872

Name of the Vulnerable Software and Affected Versions alto-saxophone versions prior to 2.25.1 Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. An attacker with a privileged network position could intercept...

PT-2018-6069

Name of the Vulnerable Software and Affected Versions: ikst versions prior to 1.1.2 Description: The issue allows for insecure downloading of resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. In scenarios where an attacker has a privileged network position, they can...

PT-2018-4875

Name of the Vulnerable Software and Affected Versions react-native-baidu-voice-synthesizer affected versions not specified Description The issue concerns the react-native-baidu-voice-synthesizer downloading resources over HTTP, making it susceptible to Man-in-the-Middle MITM attacks. This could...

PT-2018-4826

Name of the Vulnerable Software and Affected Versions marionette-socket-host affected versions not specified Description The issue allows for potential man-in-the-middle MITM attacks due to the insecure download of binary resources over HTTP. This could lead to remote code execution RCE if an...

PT-2018-4866

Name of the Vulnerable Software and Affected Versions haxe3 affected versions not specified Description The issue allows for man-in-the-middle MITM attacks due to the use of HTTP for downloading resources. This could potentially lead to remote code execution RCE if an attacker intercepts and alte...

PT-2018-4838

Name of the Vulnerable Software and Affected Versions fis-parser-sass-bin affected versions not specified Description The issue arises from fis-parser-sass-bin downloading binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote co...

PT-2018-4869

Name of the Vulnerable Software and Affected Versions windows-seleniumjar affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code executi...

CVE-2016-10697: Missing Encryption of Sensitive Data

react-native-baidu-voice-synthesizer is a baidu voice speech synthesizer for react native. react-native-baidu-voice-synthesizer downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources...

CVE-2016-10643: Missing Encryption of Sensitive Data

jstestdriver is a wrapper for Google's jstestdriver. jstestdriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on t...