Lucene search
+L

9 matches found

OSV
OSV
added 2020/09/01 4:15 p.m.29 views

GHSA-MF7C-58Q5-7V65 Downloads Resources over HTTP in npm-test-sqlite3-trunk

Affected versions of npm-test-sqlite3-trunk insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executio...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References2
OSV
OSV
added 2019/02/18 11:47 p.m.40 views

GHSA-7P6H-3FMW-539Q selenium-chromedriver Downloads Resources over HTTP

Affected versions of selenium-chromedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

8.1CVSS8.1AI score0.02104EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:44 p.m.21 views

Downloads Resources over HTTP in phantomjs-cheniu

Affected versions of phantomjs-cheniu insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS5.3AI score0.01752EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:33 p.m.40 views

Downloads Resources over HTTP in openframe-glslviewer

Affected versions of openframe-glslviewer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution ...

9.3CVSS6.2AI score0.01682EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/08/15 7:30 p.m.10 views

GHSA-4J59-HFW6-6W7H Downloads Resources over HTTP in cmake

Affected versions of cmake insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS7.5AI score0.02104EPSS
SaveExploits0References4
Prion
Prion
added 2018/06/04 4:29 p.m.19 views

Design/Logic Flaw

sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks...

6.8CVSS7AI score0.00546EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/06/04 4:00 p.m.26 views

CVE-2016-10654

sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks...

8AI score0.00546EPSS
SaveExploits0References1
NVD
NVD
added 2018/06/01 6:29 p.m.21 views

CVE-2016-10630

install-g-test downloads resources over HTTP, which leaves it vulnerable to MITM attacks...

5.9CVSS5.7AI score0.00547EPSS
SaveExploits0References1
OSV
OSV
added 2018/06/01 6:29 p.m.7 views

CVE-2016-10618

node-browser is a wrapper webdriver by nodejs. node-browser downloads resources over HTTP, which leaves it vulnerable to MITM attacks...

8.1CVSS5.8AI score0.00578EPSS
SaveExploits0References1
Rows per page
Query Builder