PT-2018-4746

Name of the Vulnerable Software and Affected Versions geoip-lite-country versions prior to 1.1.4 Description The issue concerns the insecure download of data resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. In scenarios where an attacker has a privileged network...

CVE-2016-10566: Missing Encryption of Sensitive Data

install-nw is a module which quickly and robustly installs and caches NW.js. install-nw versions below 1.1.5 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker...

CVE-2016-10589: Missing Encryption of Sensitive Data

selenium-binaries downloads Selenium related binaries for your OS. selenium-binaries downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if t...

CVE-2016-10578: Missing Encryption of Sensitive Data

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10635: Missing Encryption of Sensitive Data

broccoli-closure is a Closure compiler plugin for Broccoli. broccoli-closure before 1.3.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary...

PT-2018-4745

Name of the Vulnerable Software and Affected Versions product-monitor versions prior to 2.2.5 Description The issue allows for a man-in-the-middle MITM attack due to the insecure download of JavaScript resources over HTTP. This could potentially lead to remote code execution RCE if an attacker...

PT-2018-4805

Name of the Vulnerable Software and Affected Versions scala-bin versions affected versions not specified Description The issue is related to scala-bin downloading binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code...

CVE-2016-10593: Missing Encryption of Sensitive Data

ibapi is an Interactive Brokers API addon for NodeJS. ibapi downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. Before 2.5.6, it may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker...

PT-2018-4836

Name of the Vulnerable Software and Affected Versions native-opencv versions affected versions not specified Description The issue arises from native-opencv downloading binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code...

CVE-2016-10627: Missing Encryption of Sensitive Data

scala-bin is a binary wrapper for Scala. scala-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or...

CVE-2016-10679: Missing Encryption of Sensitive Data

selenium-standalone-painful installs a start-selenium command line to start a standalone selenium server with chrome-driver. selenium-standalone-painful downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by...

PT-2018-4755

Name of the Vulnerable Software and Affected Versions ibm db versions prior to 1.0.2 Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to Man-In-The-Middle MITM attacks. If an attacker is positioned on the network or between the user and the...

PT-2018-4779

Name of the Vulnerable Software and Affected Versions webdrvr versions affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution...

PT-2018-4748

Name of the Vulnerable Software and Affected Versions pngcrush-installer versions prior to 1.8.10 Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. If an attacker is positioned on the network or between the...

PT-2018-4789

Name of the Vulnerable Software and Affected Versions strider-sauce versions prior to the patched version Description The issue allows for a man-in-the-middle MITM attack due to the insecure download of zipped resources over HTTP. This could potentially lead to remote code execution RCE if an...

CVE-2016-10570: Missing Encryption of Sensitive Data

pngcrush-installer is an installer for Pngcrush. pngcrush-installer versions below 1.8.10 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary ...

PT-2018-6033

Name of the Vulnerable Software and Affected Versions: windows-build-tools versions prior to 1.0.0 Description: The issue concerns the insecure download of resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. If an attacker is positioned on the network or between the user...

PT-2018-4768

Name of the Vulnerable Software and Affected Versions cue-sdk-node versions affected versions not specified Description The issue allows for a man-in-the-middle MITM attack due to the insecure download of zipped resources over HTTP. This could potentially lead to remote code execution RCE if an...

PT-2018-4736

Name of the Vulnerable Software and Affected Versions aerospike versions prior to 2.4.2 Description The issue concerns the insecure download of binary resources over HTTP, making the module susceptible to man-in-the-middle MITM attacks. If an attacker is positioned on the network or between the...

PT-2018-4828

Name of the Vulnerable Software and Affected Versions ntfserver versions affected versions not specified Description The issue concerns the ntfserver, a Network Testing Framework Server, which downloads binary resources over HTTP. This leaves it vulnerable to man-in-the-middle MITM attacks,...