Lucene search
+L

3 matches found

PyPA
PyPA
•added 2026/07/07 2:34 p.m.•23 views

[PUNCIA] [CWE-319] Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`

ImpactAPIURLS is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. ReferencesISSUEPATCH...

6.3CVSS5.9AI score0.0027EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•5 views

CVE-2026-10763: Undefined Security Weakness

PROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the lack of HTTPS support from 3rd party Digipede server...

7CVSS5.9AI score0.00428EPSS
SaveExploits0References1
Veracode
Veracode
•added 2020/03/02 7:11 a.m.•18 views

Man-in-the-Middle (MitM)

ratis is vulnerable to man-in-the-middle MitM. The vulnerability exists as it does not use https when resolving dependencies from the maven repositories...

0.3AI score
SaveExploits0
Rows per page
Query Builder