Lucene search
+L

6857 matches found

osv_ghsa
osv_ghsa
•added 2019/02/18 11:50 p.m.•21 views

GHSA-7XVG-M3VX-2HHV Downloads Resources over HTTP in webrtc-native

Affected versions of webrtc-native insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6.3AI score0.02072EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:50 p.m.•48 views

GHSA-G785-775G-F2G8 Downloads Resources over HTTP in haxe

Affected versions of haxe insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.2AI score0.01656EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:48 p.m.•76 views

GHSA-4Q79-FCH7-G78Q Downloads Resources over HTTP in grunt-webdriver-qunit

Affected versions of grunt-webdriver-qunit insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

9.3CVSS8.2AI score0.01656EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:48 p.m.•52 views

GHSA-6V7P-J23V-4XMW robot-js downloads Resources over HTTP

Affected versions of robot-js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

7.5CVSS6.3AI score0.01586EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:48 p.m.•34 views

robot-js downloads Resources over HTTP

Affected versions of robot-js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS7.6AI score0.01586EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2019/02/18 11:47 p.m.•29 views

Downloads Resources over HTTP in strider-sauce

Affected versions of strider-sauce insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS3.7AI score0.01725EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:47 p.m.•40 views

GHSA-8GF4-PCJ6-54RP Downloads Resources over HTTP in strider-sauce

Affected versions of strider-sauce insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS7.5AI score0.01725EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:47 p.m.•56 views

GHSA-X56R-5R34-QG74 dalek-browser-ie-canary downloads Resources over HTTP

Affected versions of dalek-browser-ie-canary insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executi...

8.1CVSS8.1AI score0.01725EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:47 p.m.•12 views

GHSA-4X5J-V9V9-W8GW Downloads Resources over HTTP in httpsync

Affected versions of httpsync insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS7.5AI score0.01672EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:47 p.m.•51 views

GHSA-7P6H-3FMW-539Q selenium-chromedriver Downloads Resources over HTTP

Affected versions of selenium-chromedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

8.1CVSS8.1AI score0.02072EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:47 p.m.•47 views

GHSA-747P-JFQV-F43R Downloads Resources over HTTP in mystem3

Affected versions of mystem3 insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

8.1CVSS8.2AI score0.01656EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2019/02/18 11:47 p.m.•40 views

selenium-wrapper downloads Resources over HTTP

Affected versions of selenium-wrapper insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS8.1AI score0.02072EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:47 p.m.•56 views

GHSA-CVX3-PQMJ-X57X scalajs-standalone-bin Downloads Resources over HTTP

Affected versions of scalajs-standalone-bin insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executio...

9.3CVSS6.3AI score0.01725EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:47 p.m.•56 views

GHSA-CWP7-92H5-82WX Downloads Resources over HTTP in haxe-dev

Affected versions of haxe-dev insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS8.1AI score0.01725EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:47 p.m.•47 views

Downloads Resources over HTTP in redis-srvr

Affected versions of redis-srvr insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6AI score0.01725EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:47 p.m.•19 views

GHSA-J3CR-J9JX-MF4P Downloads Resources over HTTP in redis-srvr

Affected versions of redis-srvr insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01725EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:47 p.m.•77 views

GHSA-M2W9-RM58-MHM9 Downloads Resources over HTTP in node-thulac

Affected versions of node-thulac insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01725EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:47 p.m.•37 views

Downloads Resources over HTTP in node-thulac

Affected versions of node-thulac insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6.4AI score0.01725EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:47 p.m.•40 views

GHSA-476P-R2WX-2WCH Downloads Resources over HTTP in ntfserver

Affected versions of ntfserver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syst...

9.3CVSS8.1AI score0.01725EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:47 p.m.•44 views

Downloads Resources over HTTP in ntfserver

Affected versions of ntfserver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syst...

9.3CVSS6.2AI score0.01725EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder