Lucene search
K

7 matches found

OSV
OSV
added 2019/02/18 11:40 p.m.15 views

GHSA-2R5H-GH4X-8HP9 Resources Downloaded over Insecure Protocol in igniteui

Affected versions of igniteui download Javascript and CSS resources over an unencrypted HTTP connection. An attacker with a privileged network position can intercept and view or modify any content sent or recieved over an unencrypted HTTP connection. Recommendation The igniteui package has been...

7.4CVSS7.3AI score0.00136EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:40 p.m.17 views

Resources Downloaded over Insecure Protocol in igniteui

Affected versions of igniteui download Javascript and CSS resources over an unencrypted HTTP connection. An attacker with a privileged network position can intercept and view or modify any content sent or recieved over an unencrypted HTTP connection. Recommendation The igniteui package has been...

7.4CVSS3.1AI score0.00136EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/05/31 8:29 p.m.1 views

CVE-2016-10552

igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol...

7.4CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2018/05/31 8:29 p.m.8 views

CVE-2016-10552

igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol...

7.4CVSS7.5AI score0.00136EPSS
Exploits0References1
Prion
Prion
added 2018/05/31 8:29 p.m.14 views

Information disclosure

igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol...

5.8CVSS7AI score0.00136EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/05/31 8:0 p.m.15 views

CVE-2016-10552

igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol...

7.5AI score0.00136EPSS
Exploits0References1
CVE
CVE
added 2018/05/31 8:0 p.m.53 views

CVE-2016-10552

CVE-2016-10552 affects the Ignite UI package: versions 0.0.5 and earlier download JavaScript and CSS resources over an insecure HTTP connection. The core issue is unencrypted resource loading, enabling an attacker with network access to intercept or modify content. The linked advisories corrobora...

7.4CVSS7.4AI score0.00136EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder