Lucene search
+L

296 matches found

osv_ghsa
osv_ghsa
•added 2019/02/18 11:44 p.m.•54 views

GHSA-W364-8VFV-GVF5 Downloads Resources over HTTP in phantomjs-cheniu

Affected versions of phantomjs-cheniu insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS8.1AI score0.01725EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:44 p.m.•36 views

Downloads Resources over HTTP in tomita

Affected versions of tomita insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS5.5AI score0.01656EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:44 p.m.•54 views

GHSA-CR8H-X88H-JWJ2 wixtoolset downloads Resources over HTTP

Affected versions of wixtoolset insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS8.1AI score0.02177EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2019/02/18 11:44 p.m.•31 views

Downloads Resources over HTTP in selenium-portal

Affected versions of selenium-portal insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

9.3CVSS6AI score0.01725EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:44 p.m.•42 views

GHSA-P9PM-55VP-2JQW Downloads Resources over HTTP in soci

Affected versions of soci insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.1AI score0.01656EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:44 p.m.•68 views

GHSA-WG5R-C793-W5W2 Downloads Resources over HTTP in mystem-wrapper

Affected versions of mystem-wrapper insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01656EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:44 p.m.•35 views

cloudpub-redis downloads Resources over HTTP

Affected versions of cloudpub-redis insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01656EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:44 p.m.•58 views

GHSA-GF8V-VXF9-7C66 cloudpub-redis downloads Resources over HTTP

Affected versions of cloudpub-redis insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS8.1AI score0.01656EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:42 p.m.•40 views

Downloads Resources over HTTP in limbus-buildgen

Affected versions of limbus-buildgen insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

9.3CVSS5.7AI score0.01689EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2019/02/18 11:42 p.m.•30 views

Downloads Resources over HTTP in rs-brightcove

Affected versions of rs-brightcove insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6.4AI score0.01725EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:42 p.m.•52 views

GHSA-69R7-CW26-PX6H Downloads Resources over HTTP in google-closure-tools-latest

Affected versions of google-closure-tools-latest insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS8.1AI score0.01725EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:42 p.m.•46 views

Downloads Resources over HTTP in arcanist

Affected versions of arcanist insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS5.4AI score0.01656EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2019/02/18 11:42 p.m.•27 views

Downloads Resources over HTTP in pk-app-wonderbox

Affected versions of pk-app-wonderbox insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS6.4AI score0.01656EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:42 p.m.•39 views

GHSA-FWHP-2HQR-6G72 Downloads Resources over HTTP in pk-app-wonderbox

Affected versions of pk-app-wonderbox insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS8.1AI score0.01656EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:41 p.m.•57 views

GHSA-W9MF-24H3-9WXF Downloads Resources over HTTP in windows-iedriver

Affected versions of windows-iedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS8.1AI score0.01656EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:40 p.m.•27 views

GHSA-2MVM-66Q7-M256 Downloads Resources over HTTP in selenium-download

Affected versions of selenium-download insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

9.3CVSS6.3AI score0.01725EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:35 p.m.•63 views

GHSA-H2R4-4XGF-3865 Downloads Resources over HTTP in product-monitor

Affected versions of product-monitor insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

9.3CVSS8.1AI score0.01656EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:34 p.m.•40 views

Downloads Resources over HTTP in wasdk

Affected versions of wasdk insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS5.7AI score0.01656EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:34 p.m.•55 views

GHSA-92QM-HC53-JJRJ ibapi downloads Resources over HTTP

Affected versions of ibapi insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

8.1CVSS8.1AI score0.023EPSS
SaveExploits0References6
osv_ghsa
osv_ghsa
•added 2019/02/18 11:34 p.m.•45 views

GHSA-8CC8-8VVX-FHGW jdf-sass downloads Resources over HTTP

Affected versions of jdf-sass insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

8.1CVSS6.3AI score0.01606EPSS
SaveExploits0References3
Rows per page
Query Builder