Lucene search
+L

2203 matches found

Github Security Blog
Github Security Blog
added 2019/02/18 11:48 p.m.43 views

Downloads Resources over HTTP in grunt-webdriver-qunit

Affected versions of grunt-webdriver-qunit insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

9.3CVSS5.9AI score0.01682EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:48 p.m.25 views

robot-js downloads Resources over HTTP

Affected versions of robot-js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS7.6AI score0.01611EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:47 p.m.65 views

Downloads Resources over HTTP in httpsync

Affected versions of httpsync insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS5.6AI score0.01682EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:47 p.m.34 views

scalajs-standalone-bin Downloads Resources over HTTP

Affected versions of scalajs-standalone-bin insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executio...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:47 p.m.31 views

Downloads Resources over HTTP in grunt-ccompiler

Affected versions of grunt-ccompiler insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

9.3CVSS5.8AI score0.01752EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:47 p.m.46 views

GHSA-CWP7-92H5-82WX Downloads Resources over HTTP in haxe-dev

Affected versions of haxe-dev insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:47 p.m.62 views

GHSA-M2W9-RM58-MHM9 Downloads Resources over HTTP in node-thulac

Affected versions of node-thulac insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:47 p.m.30 views

Downloads Resources over HTTP in ntfserver

Affected versions of ntfserver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syst...

9.3CVSS6.2AI score0.01752EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:47 p.m.38 views

GHSA-2VQV-HP3P-FMV8 Downloads Resources over HTTP in webdriver-launcher

Affected versions of webdriver-launcher insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:45 p.m.19 views

GHSA-5Q5W-MF87-57X4 Downloads Resources over HTTP in sfml

Affected versions of sfml insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the behavior of t...

8.1CVSS8.1AI score0.00546EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:45 p.m.34 views

clang-extra downloads Resources over HTTP

Affected versions of clang-extra insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:45 p.m.57 views

GHSA-5RM3-QHXF-RH3R Downloads Resources over HTTP in co-cli-installer

Affected versions of co-cli-installer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:45 p.m.37 views

GHSA-5PQ8-2Q24-MJ3P Downloads Resources over HTTP in fis-parser-sass-bin

Affected versions of fis-parser-sass-bin insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution o...

9.3CVSS7.5AI score0.01682EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:45 p.m.32 views

Downloads Resources over HTTP in fis-parser-sass-bin

Affected versions of fis-parser-sass-bin insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution o...

9.3CVSS6.4AI score0.01682EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:44 p.m.31 views

Downloads Resources over HTTP in tomita

Affected versions of tomita insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS5.5AI score0.01682EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:44 p.m.39 views

GHSA-CR8H-X88H-JWJ2 wixtoolset downloads Resources over HTTP

Affected versions of wixtoolset insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS8.1AI score0.02211EPSS
SaveExploits0References4
OSV
OSV
added 2019/02/18 11:44 p.m.31 views

GHSA-P9PM-55VP-2JQW Downloads Resources over HTTP in soci

Affected versions of soci insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:44 p.m.44 views

GHSA-M8PW-H8QJ-RGJ9 ipip-coffee downloads Resources over HTTP

Affected versions of ipip-coffee insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. This could impact the integrity and availability of the data being used to make geolocation decisions by an...

8.1CVSS7.9AI score0.00546EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:42 p.m.34 views

GHSA-3W76-X94R-PW44 Downloads Resources over HTTP in rs-brightcove

Affected versions of rs-brightcove insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:42 p.m.22 views

Downloads Resources over HTTP in rs-brightcove

Affected versions of rs-brightcove insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6.4AI score0.01752EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder