Lucene search
+L

274 matches found

Github Security Blog
Github Security Blog
added 2019/02/18 11:56 p.m.31 views

headless-browser-lite downloads Resources over HTTP

Affected versions of headless-browser-lite insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2019/02/18 11:56 p.m.30 views

GHSA-3C87-R9F7-QFGQ Downloads Resources over HTTP in macaca-chromedriver-zxa

Affected versions of macaca-chromedriver-zxa insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executi...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:56 p.m.21 views

Downloads Resources over HTTP in fibjs

Affected versions of fibjs insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS5.9AI score0.01752EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:56 p.m.35 views

Downloads Resources over HTTP in atom-node-module-installer

Affected versions of atom-node-module-installer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS6.2AI score0.01682EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:56 p.m.31 views

Downloads Resources over HTTP in box2d-native

Affected versions of box2d-native insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6.4AI score0.01682EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:56 p.m.41 views

Downloads Resources over HTTP in curses

Affected versions of curses insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS5.9AI score0.01682EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:56 p.m.64 views

GHSA-8P52-7CXV-6C95 Downloads Resources over HTTP in curses

Affected versions of curses insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:54 p.m.51 views

GHSA-722Q-3G9X-VP8Q Downloads Resources over HTTP in tomita-parser

Affected versions of tomita-parser insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:54 p.m.12 views

GHSA-4V2C-G2XC-47FV Downloads Resources over HTTP in massif

Affected versions of massif insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.37 views

Downloads Resources over HTTP in massif

Affected versions of massif insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS5.4AI score0.01682EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.31 views

Downloads Resources over HTTP in aerospike

Affected versions of aerospike insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syst...

9.3CVSS5.1AI score0.01752EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:54 p.m.24 views

GHSA-V5V3-8JQF-VG27 Downloads Resources over HTTP in aerospike

Affected versions of aerospike insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syst...

9.3CVSS7.5AI score0.01752EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:54 p.m.52 views

GHSA-X5PH-4FR4-G7FW Downloads Resources over HTTP in galenframework-cli

Affected versions of galenframework-cli insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

9.3CVSS8.1AI score0.01699EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.30 views

Downloads Resources over HTTP in galenframework-cli

Affected versions of galenframework-cli insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

9.3CVSS5.7AI score0.01699EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.37 views

install-nw downloads Resources over HTTP

Affected versions of install-nw insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:52 p.m.44 views

GHSA-7R8M-45GC-M2C8 Downloads Resources over HTTP in mongodb-instance

Affected versions of mongodb-instance insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS8.2AI score0.01682EPSS
SaveExploits0References4
OSV
OSV
added 2019/02/18 11:51 p.m.26 views

GHSA-GC6C-5V9W-XMHW Downloads Resources over HTTP in nodewebkit

Affected versions of nodewebkit insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS7.5AI score0.01682EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:51 p.m.60 views

GHSA-8MRF-G42M-5QC8 Downloads Resources over HTTP in dalek-browser-chrome-canary

Affected versions of dalek-browser-chrome-canary insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS8.1AI score0.02061EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:51 p.m.37 views

Downloads Resources over HTTP in dalek-browser-chrome-canary

Affected versions of dalek-browser-chrome-canary insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS6.4AI score0.02061EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:51 p.m.43 views

GHSA-769C-QPHH-G3WM Downloads Resources over HTTP in macaca-chromedriver

Affected versions of macaca-chromedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution o...

9.3CVSS8.2AI score0.01752EPSS
SaveExploits0References3
Rows per page
Query Builder