Lucene search
K

6 matches found

CNVD
CNVD
added 2018/06/04 12:0 a.m.1 views

electron-packager Man-in-the-Middle Attack Vulnerability

electron-packager is a tool for packaging applications into executables based on different platforms. A security vulnerability exists in electron-packager versions 5.2.1 through 6.0.0 and 6.0.0 through 6.0.2, which stems from the '--strict-ssl' command line option being set by default to 'false '...

5.9CVSS7AI score0.00156EPSS
Exploits0References1
NVD
NVD
added 2018/05/31 8:29 p.m.11 views

CVE-2016-10534

electron-packager is a command line tool that packages Electron source code into .app and .exe packages. along with Electron. The --strict-ssl command line option in electron-packager = 5.2.1 =6.0.0 = 6.0.2 defaults to false if not explicitly set to true. This could allow an attacker to perform a...

5.9CVSS5.8AI score0.00156EPSS
Exploits0References2
Prion
Prion
added 2018/05/31 8:29 p.m.8 views

Command injection

electron-packager is a command line tool that packages Electron source code into .app and .exe packages. along with Electron. The --strict-ssl command line option in electron-packager = 5.2.1 =6.0.0 = 6.0.2 defaults to false if not explicitly set to true. This could allow an attacker to perform a...

4.3CVSS7.2AI score0.00156EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2018/05/31 8:0 p.m.11 views

CVE-2016-10534

electron-packager is a command line tool that packages Electron source code into .app and .exe packages. along with Electron. The --strict-ssl command line option in electron-packager = 5.2.1 =6.0.0 = 6.0.2 defaults to false if not explicitly set to true. This could allow an attacker to perform a...

5.8AI score0.00156EPSS
Exploits0References2
CVE
CVE
added 2018/05/31 8:0 p.m.56 views

CVE-2016-10534

CVE-2016-10534 affects electron-packager where the --strict-ssl option is defaulted to false in versions 5.2.1–6.0.0 and 6.0.0–6.0.2 unless explicitly set to true. This enables potential MITM attacks during Electron downloads for supported targets. Connected advisories corroborate the MITM risk a...

5.9CVSS5.7AI score0.00156EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2012/06/06 12:0 a.m.27 views

RedHat Update for kdelibs RHSA-2011:0464-01

Check for the Version of kdelibs OpenVAS Vulnerability Test RedHat Update for kdelibs RHSA-2011:0464-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

4.3CVSS0.01407EPSS
Exploits2References2
Rows per page
Query Builder