Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2019/02/18 11:51 p.m.•35 views

GHSA-GC6C-5V9W-XMHW Downloads Resources over HTTP in nodewebkit

Affected versions of nodewebkit insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS7.5AI score0.01656EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2019/02/18 11:51 p.m.•50 views

Downloads Resources over HTTP in nodewebkit

Affected versions of nodewebkit insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS2.6AI score0.01656EPSS
SaveExploits0References3Affected Software1
nodejs
nodejs
•added 2016/11/30 10:00 p.m.•52 views

Downloads Resources over HTTP

Overview Affected versions of nodewebkit insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution o...

9.3CVSS3AI score0.01656EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder