Lucene search
+L

1341 matches found

Github Security Blog
Github Security Blog
added 2018/08/17 8:28 p.m.27 views

Downloads Resources over HTTP in haxe3

Affected versions of haxe3 insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS4.5AI score0.01699EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2018/08/17 8:20 p.m.35 views

fis-sass-all downloads Resources over HTTP

Affected versions of fis-sass-all insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.02104EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2018/08/17 12:00 a.m.15 views

ZyXEL ZyWALL/USG Series Device Information Disclosure Vulnerability

ZyXEL ZyWALL/USG is a network security firewall appliance from Hopkins ZyXEL Technology. A security vulnerability exists in the Internet Key Exchange IKE handshake implementation used for IPsec-based VPN connections in the ZyXEL ZyWALL/USG series devices. An attacker can exploit the vulnerability...

5.9CVSS5.9AI score0.00965EPSS
SaveExploits0References1
OSV
OSV
added 2018/08/15 7:30 p.m.4 views

GHSA-4J59-HFW6-6W7H Downloads Resources over HTTP in cmake

Affected versions of cmake insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS7.5AI score0.02104EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2018/08/15 7:30 p.m.28 views

Downloads Resources over HTTP in cmake

Affected versions of cmake insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS4.6AI score0.02104EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/08/15 7:27 p.m.46 views

GHSA-PH8P-2G97-9654 Downloads Resources over HTTP in jstestdriver

Affected versions of jstestdriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2018/08/15 7:27 p.m.39 views

Downloads Resources over HTTP in jstestdriver

Affected versions of jstestdriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS4.9AI score0.01682EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/08/15 7:25 p.m.38 views

GHSA-5RC6-2R3R-FV79 slimerjs-edge downloads Resources over HTTP

Affected versions of slimerjs-edge insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS8.1AI score0.01752EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2018/08/15 7:25 p.m.30 views

slimerjs-edge downloads Resources over HTTP

Affected versions of slimerjs-edge insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/08/15 7:05 p.m.44 views

GHSA-X7Q3-67VC-WVCF grunt-images downloads Resources over HTTP

Affected versions of grunt-images insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS8.1AI score0.01682EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2018/08/15 7:05 p.m.32 views

grunt-images downloads Resources over HTTP

Affected versions of grunt-images insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2018/08/15 7:03 p.m.31 views

Downloads Resources over HTTP in resourcehacker

Affected versions of resourcehacker insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS5.8AI score0.01682EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2018/08/15 7:03 p.m.25 views

GHSA-P65H-233C-JXVM Downloads Resources over HTTP in resourcehacker

Affected versions of resourcehacker insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References4
OSV
OSV
added 2018/08/15 6:50 p.m.16 views

GHSA-8WG9-92FR-6J7V marionette-socket-host downloads Resources over HTTP

Affected versions of marionette-socket-host insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executio...

8.1CVSS8.1AI score0.01752EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2018/08/15 6:50 p.m.29 views

marionette-socket-host downloads Resources over HTTP

Affected versions of marionette-socket-host insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executio...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/07/31 10:47 p.m.27 views

GHSA-8HJ4-W233-G35Q Downloads Resources over HTTP in react-native-baidu-voice-synthesizer

Affected versions of react-native-baidu-voice-synthesizer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2018/07/31 10:47 p.m.49 views

Downloads Resources over HTTP in react-native-baidu-voice-synthesizer

Affected versions of react-native-baidu-voice-synthesizer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in...

9.3CVSS6.4AI score0.01752EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2018/07/31 10:27 p.m.42 views

Downloads Resources over HTTP in haxeshim

Affected versions of haxeshim insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS5.4AI score0.02733EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/07/31 10:27 p.m.17 views

GHSA-CR6C-85FH-CQPG Downloads Resources over HTTP in haxeshim

Affected versions of haxeshim insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

8.1CVSS8.1AI score0.02733EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2018/07/31 10:06 p.m.30 views

windows-seleniumjar downloads Resources over HTTP

Affected versions of windows-seleniumjar insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution o...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder