Lucene search
+L

1341 matches found

Github Security Blog
Github Security Blog
added 2019/02/18 11:44 p.m.27 views

cloudpub-redis downloads Resources over HTTP

Affected versions of cloudpub-redis insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:44 p.m.44 views

GHSA-GF8V-VXF9-7C66 cloudpub-redis downloads Resources over HTTP

Affected versions of cloudpub-redis insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS8.1AI score0.01682EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:44 p.m.41 views

GHSA-M8PW-H8QJ-RGJ9 ipip-coffee downloads Resources over HTTP

Affected versions of ipip-coffee insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. This could impact the integrity and availability of the data being used to make geolocation decisions by an...

8.1CVSS7.9AI score0.00546EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:42 p.m.39 views

libsbmlsim downloads Resources over HTTP

Affected versions of libsbmlsim insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.02021EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:42 p.m.48 views

GHSA-X268-6JHM-2MX8 libsbmlsim downloads Resources over HTTP

Affected versions of libsbmlsim insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS8.1AI score0.02021EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:42 p.m.33 views

GHSA-3W76-X94R-PW44 Downloads Resources over HTTP in rs-brightcove

Affected versions of rs-brightcove insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:42 p.m.21 views

Downloads Resources over HTTP in rs-brightcove

Affected versions of rs-brightcove insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6.4AI score0.01752EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:42 p.m.49 views

Downloads Resources over HTTP in serc.js

Affected versions of serc.js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS6.4AI score0.01682EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2019/02/18 11:42 p.m.49 views

GHSA-G7W9-VM5M-48Q8 Downloads Resources over HTTP in arcanist

Affected versions of arcanist insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:42 p.m.34 views

Downloads Resources over HTTP in arcanist

Affected versions of arcanist insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS5.4AI score0.01682EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:42 p.m.21 views

Downloads Resources over HTTP in pk-app-wonderbox

Affected versions of pk-app-wonderbox insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS6.4AI score0.01682EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:42 p.m.34 views

GHSA-FWHP-2HQR-6G72 Downloads Resources over HTTP in pk-app-wonderbox

Affected versions of pk-app-wonderbox insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:41 p.m.45 views

GHSA-W9MF-24H3-9WXF Downloads Resources over HTTP in windows-iedriver

Affected versions of windows-iedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:41 p.m.30 views

openframe-ascii-image downloads Resources over HTTP

Affected versions of openframe-ascii-image insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

9.3CVSS8.1AI score0.01699EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:41 p.m.54 views

GHSA-XJ6F-X7JM-85FF openframe-ascii-image downloads Resources over HTTP

Affected versions of openframe-ascii-image insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

8.1CVSS8.1AI score0.01699EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:34 p.m.24 views

Downloads Resources over HTTP in wasdk

Affected versions of wasdk insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS5.7AI score0.01682EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:34 p.m.30 views

ibapi downloads Resources over HTTP

Affected versions of ibapi insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.1AI score0.02336EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2019/02/18 11:34 p.m.25 views

GHSA-92QM-HC53-JJRJ ibapi downloads Resources over HTTP

Affected versions of ibapi insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

8.1CVSS8.1AI score0.02336EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2019/02/18 11:34 p.m.25 views

jdf-sass downloads Resources over HTTP

Affected versions of jdf-sass insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS8.1AI score0.01631EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:34 p.m.29 views

Downloads Resources over HTTP in cobalt-cli

Affected versions of cobalt-cli insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

5.9CVSS6.4AI score0.00531EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder