Lucene search
+L

8141 matches found

osv_ghsa
osv_ghsa
•added 2019/02/18 11:57 p.m.•65 views

GHSA-VVWP-3F54-XC39 Downloads Resources over HTTP in broccoli-closure

Affected versions of broccoli-closure insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS8.2AI score0.01656EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:57 p.m.•18 views

GHSA-4PF7-579W-F4GM dwebp-bin downloads Resources over HTTP

Affected versions of dwebp-bin insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syst...

8.1CVSS6.3AI score0.01725EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2019/02/18 11:56 p.m.•58 views

Downloads Resources over HTTP in macaca-chromedriver-zxa

Affected versions of macaca-chromedriver-zxa insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executi...

9.3CVSS5.5AI score0.01725EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:56 p.m.•134 views

GHSA-87G3-X896-W798 Downloads Resources over HTTP in atom-node-module-installer

Affected versions of atom-node-module-installer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS8.1AI score0.01656EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:54 p.m.•55 views

GHSA-3X83-P476-VV95 Downloads Resources over HTTP in selenium-standalone-painful

Affected versions of selenium-standalone-painful insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS7.5AI score0.01989EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2019/02/18 11:54 p.m.•31 views

GHSA-V5V3-8JQF-VG27 Downloads Resources over HTTP in aerospike

Affected versions of aerospike insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syst...

9.3CVSS7.5AI score0.01725EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:54 p.m.•36 views

Downloads Resources over HTTP in iedriver

Affected versions of iedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS5.6AI score0.01656EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:54 p.m.•64 views

GHSA-WQ7Q-7VFH-2X3H install-nw downloads Resources over HTTP

Affected versions of install-nw insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS8.2AI score0.01656EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:52 p.m.•33 views

Downloads Resources over HTTP in mongodb-instance

Affected versions of mongodb-instance insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS5.7AI score0.01656EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:52 p.m.•51 views

GHSA-3627-W2QR-5FXR fuseki downloads Resources over HTTP

Affected versions of fuseki insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

8.1CVSS8.2AI score0.01656EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:51 p.m.•52 views

Downloads Resources over HTTP in nodewebkit

Affected versions of nodewebkit insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS2.6AI score0.01656EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2019/02/18 11:51 p.m.•44 views

Downloads Resources over HTTP in dalek-browser-chrome-canary

Affected versions of dalek-browser-chrome-canary insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS6.4AI score0.02029EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2019/02/18 11:50 p.m.•46 views

arrayfire-js downloads Resources over HTTP

Affected versions of arrayfire-js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.5CVSS7.6AI score0.01333EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:50 p.m.•48 views

GHSA-G785-775G-F2G8 Downloads Resources over HTTP in haxe

Affected versions of haxe insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.2AI score0.01656EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:48 p.m.•32 views

robot-js downloads Resources over HTTP

Affected versions of robot-js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS7.6AI score0.01586EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:47 p.m.•38 views

GHSA-8GF4-PCJ6-54RP Downloads Resources over HTTP in strider-sauce

Affected versions of strider-sauce insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS7.5AI score0.01725EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:47 p.m.•26 views

Downloads Resources over HTTP in strider-sauce

Affected versions of strider-sauce insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS3.7AI score0.01725EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2019/02/18 11:47 p.m.•74 views

Downloads Resources over HTTP in httpsync

Affected versions of httpsync insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS5.6AI score0.01658EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2019/02/18 11:47 p.m.•32 views

selenium-chromedriver Downloads Resources over HTTP

Affected versions of selenium-chromedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

9.3CVSS8AI score0.02072EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2019/02/18 11:47 p.m.•47 views

GHSA-747P-JFQV-F43R Downloads Resources over HTTP in mystem3

Affected versions of mystem3 insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

8.1CVSS8.2AI score0.01656EPSS
SaveExploits0References4
Rows per page
Query Builder