CVE-2016-10650: Missing Encryption of Sensitive Data

ntfserver is a Network Testing Framework Server. ntfserver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the...

CVE-2016-10658: Missing Encryption of Sensitive Data

native-opencv is the OpenCV library installed via npm native-opencv downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is o...

CVE-2016-10559: Missing Encryption of Sensitive Data

selenium-download downloads the latest versions of the selenium standalone server and the chromedriver. selenium-download before 2.0.7 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the...

PT-2018-4762

Name of the Vulnerable Software and Affected Versions dalek-browser-chrome-canary affected versions not specified Description The issue allows for a man-in-the-middle MITM attack due to the insecure download of binary resources over HTTP. This could potentially lead to remote code execution RCE i...

CVE-2016-10566: Missing Encryption of Sensitive Data

install-nw is a module which quickly and robustly installs and caches NW.js. install-nw versions below 1.1.5 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker...

PT-2018-4751

Name of the Vulnerable Software and Affected Versions baryton-saxophone versions prior to 3.0.1 Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to Man-in-the-Middle MITM attacks. If an attacker is positioned on the network or between the...

PT-2018-4836

Name of the Vulnerable Software and Affected Versions native-opencv versions affected versions not specified Description The issue arises from native-opencv downloading binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code...

CVE-2016-10627: Missing Encryption of Sensitive Data

scala-bin is a binary wrapper for Scala. scala-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or...

CVE-2016-10635: Missing Encryption of Sensitive Data

broccoli-closure is a Closure compiler plugin for Broccoli. broccoli-closure before 1.3.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary...

CVE-2016-10674: Missing Encryption of Sensitive Data

limbus-buildgen is a "build anywhere" build system. limbus-buildgen versions below 0.1.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy ...

PT-2018-4844

Name of the Vulnerable Software and Affected Versions tomita-parser versions affected versions not specified Description The issue arises from the tomita-parser downloading binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote...

PT-2018-4755

Name of the Vulnerable Software and Affected Versions ibm db versions prior to 1.0.2 Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to Man-In-The-Middle MITM attacks. If an attacker is positioned on the network or between the user and the...

CVE-2016-10573: Missing Encryption of Sensitive Data

baryton-saxophone is a module to install and launch Selenium Server for Mac, Linux and Windows. baryton-saxophone versions below 3.0.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the request...

PT-2018-4779

Name of the Vulnerable Software and Affected Versions webdrvr versions affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code execution...

PT-2018-4748

Name of the Vulnerable Software and Affected Versions pngcrush-installer versions prior to 1.8.10 Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. If an attacker is positioned on the network or between the...

PT-2018-4736

Name of the Vulnerable Software and Affected Versions aerospike versions prior to 2.4.2 Description The issue concerns the insecure download of binary resources over HTTP, making the module susceptible to man-in-the-middle MITM attacks. If an attacker is positioned on the network or between the...

PT-2018-4744

Name of the Vulnerable Software and Affected Versions install-nw versions prior to 1.1.5 Description The issue allows for a man-in-the-middle MITM attack due to the download of binary resources over HTTP. This could potentially lead to remote code execution RCE if an attacker intercepts the reque...

CVE-2016-10593: Missing Encryption of Sensitive Data

ibapi is an Interactive Brokers API addon for NodeJS. ibapi downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. Before 2.5.6, it may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker...

Man In The Middle (MitM)

closurecompiler is vulnerable to man-in-the-middle MitM attacks. This is because the library downloads binary resources via HTTP, allowing MitM attacks. It may also cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the...

Man In The Middle (MitM)

bkjs-wand is vulnerable to man-in-the-middle MitM attacks. This is because the library downloads binary resources via HTTP, allowing MitM attacks. It may also cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the network ...