Lucene search
+L

5801 matches found

OSV
OSV
added 2019/02/18 11:54 p.m.50 views

GHSA-X5PH-4FR4-G7FW Downloads Resources over HTTP in galenframework-cli

Affected versions of galenframework-cli insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

9.3CVSS8.1AI score0.01699EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.28 views

Downloads Resources over HTTP in galenframework-cli

Affected versions of galenframework-cli insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

9.3CVSS5.7AI score0.01699EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.34 views

install-nw downloads Resources over HTTP

Affected versions of install-nw insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01682EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/18 11:52 p.m.37 views

Downloads Resources over HTTP in bkjs-wand

Affected versions of bkjs-wand insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syst...

9.3CVSS5.7AI score0.01682EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:52 p.m.43 views

GHSA-7R8M-45GC-M2C8 Downloads Resources over HTTP in mongodb-instance

Affected versions of mongodb-instance insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS8.2AI score0.01682EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2019/02/18 11:52 p.m.24 views

Downloads Resources over HTTP in mongodb-instance

Affected versions of mongodb-instance insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...

9.3CVSS5.7AI score0.01682EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2019/02/18 11:51 p.m.16 views

GHSA-GC6C-5V9W-XMHW Downloads Resources over HTTP in nodewebkit

Affected versions of nodewebkit insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS7.5AI score0.01682EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:51 p.m.21 views

GHSA-HJGP-8FFR-HWWR closurecompiler downloads Resources over HTTP

Affected versions of closurecompiler insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

8.1CVSS6.3AI score0.01682EPSS
SaveExploits0References4
OSV
OSV
added 2019/02/18 11:51 p.m.35 views

GHSA-8MRF-G42M-5QC8 Downloads Resources over HTTP in dalek-browser-chrome-canary

Affected versions of dalek-browser-chrome-canary insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS8.1AI score0.02061EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:51 p.m.36 views

Downloads Resources over HTTP in dalek-browser-chrome-canary

Affected versions of dalek-browser-chrome-canary insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS6.4AI score0.02061EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:51 p.m.38 views

GHSA-769C-QPHH-G3WM Downloads Resources over HTTP in macaca-chromedriver

Affected versions of macaca-chromedriver insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution o...

9.3CVSS8.2AI score0.01752EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:50 p.m.56 views

GHSA-P2HM-8725-C8X8 Downloads Resources over HTTP in cue-sdk-node

Affected versions of cue-sdk-node insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS8.1AI score0.01752EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:50 p.m.5 views

GHSA-7XVG-M3VX-2HHV Downloads Resources over HTTP in webrtc-native

Affected versions of webrtc-native insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS6.3AI score0.02104EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:50 p.m.43 views

GHSA-G785-775G-F2G8 Downloads Resources over HTTP in haxe

Affected versions of haxe insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

9.3CVSS8.2AI score0.01682EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:48 p.m.34 views

GHSA-4Q79-FCH7-G78Q Downloads Resources over HTTP in grunt-webdriver-qunit

Affected versions of grunt-webdriver-qunit insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

9.3CVSS8.2AI score0.01682EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:48 p.m.23 views

robot-js downloads Resources over HTTP

Affected versions of robot-js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

9.3CVSS7.6AI score0.01611EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:48 p.m.40 views

GHSA-6V7P-J23V-4XMW robot-js downloads Resources over HTTP

Affected versions of robot-js insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syste...

7.5CVSS6.3AI score0.01611EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:47 p.m.20 views

Downloads Resources over HTTP in strider-sauce

Affected versions of strider-sauce insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

9.3CVSS3.7AI score0.01752EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:47 p.m.11 views

GHSA-8GF4-PCJ6-54RP Downloads Resources over HTTP in strider-sauce

Affected versions of strider-sauce insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

8.1CVSS7.5AI score0.01752EPSS
SaveExploits0References3
OSV
OSV
added 2019/02/18 11:47 p.m.46 views

GHSA-X56R-5R34-QG74 dalek-browser-ie-canary downloads Resources over HTTP

Affected versions of dalek-browser-ie-canary insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executi...

8.1CVSS8.1AI score0.01752EPSS
SaveExploits0References3
Rows per page
Query Builder