Lucene search
+L

10 matches found

osv_ghsa
osv_ghsa
•added 2019/02/18 11:40 p.m.•55 views

GHSA-2R5H-GH4X-8HP9 Resources Downloaded over Insecure Protocol in igniteui

Affected versions of igniteui download Javascript and CSS resources over an unencrypted HTTP connection. An attacker with a privileged network position can intercept and view or modify any content sent or recieved over an unencrypted HTTP connection. Recommendation The igniteui package has been...

7.4CVSS7.3AI score0.00526EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:40 p.m.•45 views

Resources Downloaded over Insecure Protocol in igniteui

Affected versions of igniteui download Javascript and CSS resources over an unencrypted HTTP connection. An attacker with a privileged network position can intercept and view or modify any content sent or recieved over an unencrypted HTTP connection. Recommendation The igniteui package has been...

7.4CVSS3.1AI score0.00526EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2018/05/31 8:29 p.m.•17 views

CVE-2016-10552

igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol...

7.4CVSS5.8AI score0.00526EPSS
SaveExploits0References1
NVD
NVD
•added 2018/05/31 8:29 p.m.•29 views

CVE-2016-10552

igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol...

7.4CVSS7.5AI score0.00526EPSS
SaveExploits0References1
Prion
Prion
•added 2018/05/31 8:29 p.m.•30 views

Information disclosure

igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol...

5.8CVSS7AI score0.00526EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/05/31 8:00 p.m.•51 views

CVE-2016-10552

igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol...

7.5AI score0.00526EPSS
SaveExploits0References1
CVE
CVE
•added 2018/05/31 8:00 p.m.•78 views

CVE-2016-10552

CVE-2016-10552 affects the Ignite UI package: versions 0.0.5 and earlier download JavaScript and CSS resources over an insecure HTTP connection. The core issue is unencrypted resource loading, enabling an attacker with network access to intercept or modify content. The linked advisories corrobora...

7.4CVSS7.4AI score0.00526EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2018/05/31 8:00 p.m.•5 views

CVE-2016-10552

igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol...

9.1CVSS0.00526EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/31 12:00 a.m.•8 views

CVE-2016-10552: Missing Encryption of Sensitive Data

igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol...

7.4CVSS7.3AI score0.00526EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/05/31 12:00 a.m.•6 views

PT-2018-4730

Name of the Vulnerable Software and Affected Versions igniteui versions 0.0.5 and earlier Description The issue concerns the download of JavaScript and CSS resources over an insecure protocol. Specifically, affected versions of igniteui download these resources over an unencrypted HTTP connection...

7.4CVSS0.00526EPSS
SaveExploits0References6
Rows per page
Query Builder