CVE-2016-10610

unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

Code injection

unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10610

unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10610

unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10610

unicode-json before 2.0.0 downloads data resources over HTTP, enabling potential MitM manipulation/read of resources and, in some advisories, remote code execution risks. The affected component is the unicode-json package (pre-2.0.0) and the remediation advised across sources is to upgrade to ver...

CVE-2016-10610: Missing Encryption of Sensitive Data

unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

PT-2018-4788

Name of the Vulnerable Software and Affected Versions unicode-json versions prior to 2.0.0 Description The issue concerns the insecure download of data resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. In scenarios where an attacker has a privileged network position,...

unicode code execution vulnerability

unicode is a tool that provides data from unicode for nodejs. A security vulnerability exists in unicode versions prior to 9.0.0, which originates from a program that insecurely downloads resources over the HTTP protocol. An attacker can exploit the vulnerability to alter or read resources and...

CVE-2016-10578

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10578

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks...

Code injection

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10578

CVE-2016-10578 concerns the unicode package used with Node.js. It states that unicode loads data from unicode.org and, prior to version 9.0.0, downloads binary resources over HTTP, enabling a network attacker to modify or read resources (MitM). According to connected advisories, this can lead to ...

CVE-2016-10578

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10578

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks...

itemsapi-starter (1.0.3), larvitblog (>=0.1.1, <=0.4.1) +8 more potentially affected by CVE-2016-10578 via unicode (0.6.1)

unicode NPM version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on unicode and may be impacted: - itemsapi-starter 1.0.3 - larvitblog =0.1.1, =0.1.1, =0.1.1, =0.10.7, =2.0.0, =1.1.0, =1.1.7, =1.2.0, =1.2.15 Source cves: CVE-2016-10578 Source...

PT-2018-4756

Name of the Vulnerable Software and Affected Versions unicode versions prior to 9.0.0 Description The issue concerns the insecure download of resources over HTTP, which makes it susceptible to man-in-the-middle MITM attacks. In scenarios where an attacker has a privileged network position, they c...

CVE-2016-10578: Missing Encryption of Sensitive Data

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20180524)

This update upgrades Thunderbird to version 52.8.0. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 CVE-2018-5150 - Mozilla: Backport critical security fixes in Skia CVE-2018-5183 - Mozilla: Use-after-free with SVG animations and clip paths CVE-2018-5154 -...

openSUSE Security Update : icu (openSUSE-2018-517)

icu was updated to fix two security issues. These security issues were fixed : - CVE-2014-8147: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU used an integer data type that is...

Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension

A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR 52.8, Thunderbird 52.8, and...