Lucene search
+L

2291 matches found

Github Security Blog
Github Security Blog
added 2019/02/18 11:56 p.m.21 views

Downloads Resources over HTTP in fibjs

Affected versions of fibjs insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS5.9AI score0.01987EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:56 p.m.47 views

GHSA-6P48-XFJ3-JW67 Downloads Resources over HTTP in fibjs

Affected versions of fibjs insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.1AI score0.01987EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:56 p.m.117 views

GHSA-87G3-X896-W798 Downloads Resources over HTTP in atom-node-module-installer

Affected versions of atom-node-module-installer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS8.1AI score0.01928EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:56 p.m.31 views

Downloads Resources over HTTP in pennyworth

Affected versions of pennyworth insecurely downloads resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the behavi...

8.1CVSS2.8AI score0.00597EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:56 p.m.25 views

GHSA-X3J8-G4V9-67JQ Downloads Resources over HTTP in pennyworth

Affected versions of pennyworth insecurely downloads resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the behavi...

8.1CVSS8.1AI score0.00597EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:56 p.m.26 views

node-browser downloads Resources over HTTP

Affected versions of node-browser insecurely downloads resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the...

8.1CVSS7.9AI score0.00625EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:56 p.m.31 views

Downloads Resources over HTTP in box2d-native

Affected versions of box2d-native insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6.4AI score0.01928EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:56 p.m.24 views

GHSA-362X-34H3-H6H6 Downloads Resources over HTTP in box2d-native

Affected versions of box2d-native insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01928EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:56 p.m.38 views

Downloads Resources over HTTP in curses

Affected versions of curses insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS5.9AI score0.01928EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:56 p.m.34 views

Downloads Resources over HTTP in bionode-sra

Affected versions of bionode-sra insecurely downloads resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the...

5.9CVSS2.6AI score0.00549EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:54 p.m.38 views

GHSA-F757-9C4X-CHFF poco downloads Resources over HTTP

Affected versions of poco insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

8.1CVSS8.1AI score0.01987EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.43 views

poco downloads Resources over HTTP

Affected versions of poco insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.1AI score0.01987EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.36 views

Downloads Resources over HTTP in tomita-parser

Affected versions of tomita-parser insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6AI score0.01928EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:54 p.m.12 views

GHSA-4V2C-G2XC-47FV Downloads Resources over HTTP in massif

Affected versions of massif insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.1AI score0.01928EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.34 views

Downloads Resources over HTTP in massif

Affected versions of massif insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS5.4AI score0.01928EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:51 p.m.36 views

Downloads Resources over HTTP in dalek-browser-chrome-canary

Affected versions of dalek-browser-chrome-canary insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS6.4AI score0.02359EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:51 p.m.60 views

GHSA-8MRF-G42M-5QC8 Downloads Resources over HTTP in dalek-browser-chrome-canary

Affected versions of dalek-browser-chrome-canary insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS8.1AI score0.02359EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:50 p.m.37 views

Downloads Resources over HTTP in cue-sdk-node

Affected versions of cue-sdk-node insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6.4AI score0.01987EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:50 p.m.59 views

GHSA-P2HM-8725-C8X8 Downloads Resources over HTTP in cue-sdk-node

Affected versions of cue-sdk-node insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01987EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:50 p.m.26 views

ipip downloads Resources over HTTP

Affected versions of ipip insecurely downloads resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the behavior of...

8.1CVSS7.9AI score0.00625EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder