Lucene search
+L

3440 matches found

OSV
OSV
added 2019/02/18 11:54 p.m.14 views

GHSA-JFGQ-G48X-JQ83 Downloads Resources over HTTP in iedriver

Affected versions of iedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.27 views

Downloads Resources over HTTP in iedriver

Affected versions of iedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS5.6AI score0.01682EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:52 p.m.36 views

GHSA-4WM5-Q7WV-6JX3 Downloads Resources over HTTP in bkjs-wand

Affected versions of bkjs-wand insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syst...

9.3CVSS8.2AI score0.01682EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:52 p.m.36 views

GHSA-3627-W2QR-5FXR fuseki downloads Resources over HTTP

Affected versions of fuseki insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

8.1CVSS8.2AI score0.01682EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:50 p.m.34 views

Downloads Resources over HTTP in cue-sdk-node

Affected versions of cue-sdk-node insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6.4AI score0.01752EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:50 p.m.39 views

Downloads Resources over HTTP in webrtc-native

Affected versions of webrtc-native insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS4AI score0.02104EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:48 p.m.21 views

robot-js downloads Resources over HTTP

Affected versions of robot-js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS7.6AI score0.01611EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:48 p.m.38 views

GHSA-6V7P-J23V-4XMW robot-js downloads Resources over HTTP

Affected versions of robot-js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

7.5CVSS6.3AI score0.01611EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:47 p.m.37 views

GHSA-7P6H-3FMW-539Q selenium-chromedriver Downloads Resources over HTTP

Affected versions of selenium-chromedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

8.1CVSS8.1AI score0.02104EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:47 p.m.24 views

selenium-chromedriver Downloads Resources over HTTP

Affected versions of selenium-chromedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

9.3CVSS8AI score0.02104EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:47 p.m.36 views

GHSA-747P-JFQV-F43R Downloads Resources over HTTP in mystem3

Affected versions of mystem3 insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

8.1CVSS8.2AI score0.01682EPSS
SaveExploits0References4
OSV
OSV
added 2019/02/18 11:47 p.m.38 views

GHSA-CVX3-PQMJ-X57X scalajs-standalone-bin Downloads Resources over HTTP

Affected versions of scalajs-standalone-bin insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executio...

9.3CVSS6.3AI score0.01752EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:47 p.m.23 views

Downloads Resources over HTTP in node-thulac

Affected versions of node-thulac insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6.4AI score0.01752EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:45 p.m.61 views

GHSA-59M2-J944-839W clang-extra downloads Resources over HTTP

Affected versions of clang-extra insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS8.1AI score0.01752EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:45 p.m.41 views

GHSA-QHM8-M2C4-9MW7 Downloads Resources over HTTP in qbs

Affected versions of qbs insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:44 p.m.44 views

GHSA-W364-8VFV-GVF5 Downloads Resources over HTTP in phantomjs-cheniu

Affected versions of phantomjs-cheniu insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:44 p.m.27 views

Downloads Resources over HTTP in tomita

Affected versions of tomita insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS5.5AI score0.01682EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:44 p.m.35 views

GHSA-CR8H-X88H-JWJ2 wixtoolset downloads Resources over HTTP

Affected versions of wixtoolset insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS8.1AI score0.02211EPSS
SaveExploits0References4
OSV
OSV
added 2019/02/18 11:44 p.m.47 views

GHSA-7R2X-3QCM-8VFW herbivore downloads Resources over HTTP

Affected versions of herbivore insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syst...

8.1CVSS8.1AI score0.02189EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2019/02/18 11:44 p.m.24 views

libsbml downloads Resources over HTTP

Affected versions of libsbml insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.1AI score0.02021EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder