Lucene search
+L

633 matches found

Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.38 views

Downloads Resources over HTTP in tomita-parser

Affected versions of tomita-parser insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6AI score0.01682EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:54 p.m.18 views

GHSA-4V2C-G2XC-47FV Downloads Resources over HTTP in massif

Affected versions of massif insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.39 views

Downloads Resources over HTTP in massif

Affected versions of massif insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS5.4AI score0.01682EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:51 p.m.62 views

GHSA-8MRF-G42M-5QC8 Downloads Resources over HTTP in dalek-browser-chrome-canary

Affected versions of dalek-browser-chrome-canary insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS8.1AI score0.02061EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:51 p.m.39 views

Downloads Resources over HTTP in dalek-browser-chrome-canary

Affected versions of dalek-browser-chrome-canary insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS6.4AI score0.02061EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:50 p.m.40 views

Downloads Resources over HTTP in cue-sdk-node

Affected versions of cue-sdk-node insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6.4AI score0.01752EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:50 p.m.60 views

GHSA-P2HM-8725-C8X8 Downloads Resources over HTTP in cue-sdk-node

Affected versions of cue-sdk-node insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:50 p.m.28 views

ipip downloads Resources over HTTP

Affected versions of ipip insecurely downloads resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the behavior of...

8.1CVSS7.9AI score0.00578EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:50 p.m.109 views

GHSA-238X-Q7XF-P4XW arrayfire-js downloads Resources over HTTP

Affected versions of arrayfire-js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.5CVSS7.6AI score0.01354EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:50 p.m.40 views

arrayfire-js downloads Resources over HTTP

Affected versions of arrayfire-js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.5CVSS7.6AI score0.01354EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:50 p.m.31 views

dalek-browser-chrome Downloads Resources over HTTP

Affected versions of dalek-browser-chrome insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution ...

9.3CVSS8.1AI score0.02104EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:50 p.m.51 views

GHSA-65Q2-X652-XX84 dalek-browser-ie downloads Resources over HTTP

Affected versions of dalek-browser-ie insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

8.1CVSS8.1AI score0.01752EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:50 p.m.37 views

dalek-browser-ie downloads Resources over HTTP

Affected versions of dalek-browser-ie insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:48 p.m.45 views

Downloads Resources over HTTP in grunt-webdriver-qunit

Affected versions of grunt-webdriver-qunit insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

9.3CVSS5.9AI score0.01682EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:48 p.m.26 views

robot-js downloads Resources over HTTP

Affected versions of robot-js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS7.6AI score0.01611EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:47 p.m.49 views

GHSA-X56R-5R34-QG74 dalek-browser-ie-canary downloads Resources over HTTP

Affected versions of dalek-browser-ie-canary insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executi...

8.1CVSS8.1AI score0.01752EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:47 p.m.43 views

dalek-browser-ie-canary downloads Resources over HTTP

Affected versions of dalek-browser-ie-canary insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executi...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:47 p.m.67 views

Downloads Resources over HTTP in httpsync

Affected versions of httpsync insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS5.6AI score0.01684EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:47 p.m.48 views

GHSA-PR34-8JFR-XHV8 selenium-wrapper downloads Resources over HTTP

Affected versions of selenium-wrapper insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

8.1CVSS8.1AI score0.02104EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:47 p.m.36 views

scalajs-standalone-bin Downloads Resources over HTTP

Affected versions of scalajs-standalone-bin insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executio...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder