Lucene search
+L

1492 matches found

Github Security Blog
Github Security Blog
•added 2018/08/17 8:20 p.m.•43 views

fis-sass-all downloads Resources over HTTP

Affected versions of fis-sass-all insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.02072EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2018/08/17 12:00 a.m.•21 views

ZyXEL ZyWALL/USG Series Device Information Disclosure Vulnerability

ZyXEL ZyWALL/USG is a network security firewall appliance from Hopkins ZyXEL Technology. A security vulnerability exists in the Internet Key Exchange IKE handshake implementation used for IPsec-based VPN connections in the ZyXEL ZyWALL/USG series devices. An attacker can exploit the vulnerability...

5.9CVSS5.9AI score0.00965EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2018/08/15 7:30 p.m.•38 views

Downloads Resources over HTTP in cmake

Affected versions of cmake insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS4.6AI score0.02072EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2018/08/15 7:30 p.m.•32 views

GHSA-4J59-HFW6-6W7H Downloads Resources over HTTP in cmake

Affected versions of cmake insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS7.5AI score0.02072EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2018/08/15 7:27 p.m.•52 views

Downloads Resources over HTTP in jstestdriver

Affected versions of jstestdriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS4.9AI score0.01658EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2018/08/15 7:27 p.m.•50 views

GHSA-PH8P-2G97-9654 Downloads Resources over HTTP in jstestdriver

Affected versions of jstestdriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01658EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2018/08/15 7:25 p.m.•45 views

slimerjs-edge downloads Resources over HTTP

Affected versions of slimerjs-edge insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01725EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2018/08/15 7:25 p.m.•53 views

GHSA-5RC6-2R3R-FV79 slimerjs-edge downloads Resources over HTTP

Affected versions of slimerjs-edge insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS8.1AI score0.01725EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2018/08/15 7:05 p.m.•59 views

GHSA-X7Q3-67VC-WVCF grunt-images downloads Resources over HTTP

Affected versions of grunt-images insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS8.1AI score0.01656EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2018/08/15 7:05 p.m.•45 views

grunt-images downloads Resources over HTTP

Affected versions of grunt-images insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01656EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2018/08/15 7:03 p.m.•42 views

Downloads Resources over HTTP in resourcehacker

Affected versions of resourcehacker insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS5.8AI score0.01656EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2018/08/15 7:03 p.m.•77 views

GHSA-P65H-233C-JXVM Downloads Resources over HTTP in resourcehacker

Affected versions of resourcehacker insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01656EPSS
SaveExploits0References4
osv_ghsa
osv_ghsa
•added 2018/08/15 6:50 p.m.•41 views

GHSA-8WG9-92FR-6J7V marionette-socket-host downloads Resources over HTTP

Affected versions of marionette-socket-host insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executio...

8.1CVSS8.1AI score0.01725EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2018/08/15 6:50 p.m.•32 views

marionette-socket-host downloads Resources over HTTP

Affected versions of marionette-socket-host insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executio...

9.3CVSS8.1AI score0.01725EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2018/07/31 10:47 p.m.•55 views

Downloads Resources over HTTP in react-native-baidu-voice-synthesizer

Affected versions of react-native-baidu-voice-synthesizer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in...

9.3CVSS6.4AI score0.01725EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2018/07/31 10:47 p.m.•61 views

GHSA-8HJ4-W233-G35Q Downloads Resources over HTTP in react-native-baidu-voice-synthesizer

Affected versions of react-native-baidu-voice-synthesizer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in...

9.3CVSS8.1AI score0.01725EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2018/07/31 10:27 p.m.•22 views

GHSA-CR6C-85FH-CQPG Downloads Resources over HTTP in haxeshim

Affected versions of haxeshim insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

8.1CVSS8.1AI score0.02691EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2018/07/31 10:27 p.m.•50 views

Downloads Resources over HTTP in haxeshim

Affected versions of haxeshim insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS5.4AI score0.02691EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2018/07/31 10:06 p.m.•40 views

windows-seleniumjar downloads Resources over HTTP

Affected versions of windows-seleniumjar insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution o...

9.3CVSS8.1AI score0.01656EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2018/07/31 10:06 p.m.•46 views

GHSA-M79W-4MQV-R39F windows-seleniumjar downloads Resources over HTTP

Affected versions of windows-seleniumjar insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution o...

8.1CVSS8.1AI score0.01656EPSS
SaveExploits0References3
Rows per page
Query Builder