Lucene search
+L

256 matches found

OSV
OSV
added 2017/07/17 1:18 p.m.4 views

CVE-2017-1181

IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted. IBM X-Force ID: 123487...

7CVSS5.8AI score
SaveExploits0References4
Node.js
Node.js
added 2016/12/02 5:5 a.m.42 views

Downloads Resources over HTTP

Overview Affected versions of react-native-baidu-voice-synthesizer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one,...

9.3CVSS6.2AI score0.01752EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/02 5:4 a.m.46 views

Downloads Resources over HTTP

Overview Affected versions of mystem-fix insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution o...

9.3CVSS6.2AI score0.01752EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/02 5:2 a.m.43 views

Downloads Resources over HTTP

Overview Affected versions of haxeshim insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

9.3CVSS5.3AI score0.02733EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/02 4:59 a.m.39 views

Downloads Resources over HTTP

Overview Affected versions of openframe-ascii-image insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS6.2AI score0.01699EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/02 4:47 a.m.42 views

Downloads Resources over HTTP

Overview Affected versions of pk-app-wonderbox insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS6.2AI score0.01682EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/02 4:43 a.m.41 views

Downloads Resources over HTTP

Overview Affected versions of fis-sass-all insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

9.3CVSS6.2AI score0.02104EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/02 4:40 a.m.45 views

Downloads Resources over HTTP

Overview Affected versions of windows-selenium-chromedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting ...

9.3CVSS6.2AI score0.01752EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/02 4:32 a.m.33 views

Downloads Resources over HTTP

Overview Affected versions of cloudpub-redis insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executi...

9.3CVSS6.2AI score0.01682EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/02 4:14 a.m.48 views

Downloads Resources over HTTP

Overview Affected versions of fuseki insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

9.3CVSS5AI score0.01682EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/02 4:11 a.m.40 views

Downloads Resources over HTTP

Overview Affected versions of serc.js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS6.1AI score0.01682EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/02 1:34 a.m.40 views

Downloads Resources over HTTP

Overview Affected versions of google-closure-tools-latest insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in...

9.3CVSS5.2AI score0.01752EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/02 1:31 a.m.37 views

Downloads Resources over HTTP

Overview Affected versions of libsbml insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS5AI score0.02021EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/02 1:27 a.m.47 views

Downloads Resources over HTTP

Overview Affected versions of soci insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS5.4AI score0.01682EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/02 1:22 a.m.42 views

Downloads Resources over HTTP

Overview Affected versions of co-cli-installer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS6.2AI score0.01682EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/01 10:14 p.m.36 views

Downloads Resources over HTTP

Overview Affected versions of selenium-portal insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS5.3AI score0.01752EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/01 10:12 p.m.42 views

Downloads Resources over HTTP

Overview Affected versions of mystem insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

9.3CVSS5.7AI score0.01682EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/01 7:11 p.m.36 views

Downloads Resources over HTTP

Overview Affected versions of webdriver-launcher insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS5.3AI score0.01682EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/01 6:35 p.m.38 views

Downloads Resources over HTTP

Overview Affected versions of baryton-saxophone insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS5.6AI score0.02104EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2016/12/01 5:29 p.m.38 views

Downloads Resources over HTTP

Overview Affected versions of redis-srvr insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution o...

9.3CVSS5.3AI score0.01752EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder