1074 matches found
GHSA-VVWP-3F54-XC39 Downloads Resources over HTTP in broccoli-closure
Affected versions of broccoli-closure insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on t...
GHSA-G95J-P8F6-PWH4 headless-browser-lite downloads Resources over HTTP
Affected versions of headless-browser-lite insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...
ibm_db downloads Resources over HTTP
Affected versions of ibmdb insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the behavior of...
Downloads Resources over HTTP in limbus-buildgen
Affected versions of limbus-buildgen insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...
Downloads Resources over HTTP in product-monitor
Affected versions of product-monitor insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...
GHSA-6PWF-WHC8-HJF6 Downloads Resources over HTTP in baryton-saxophone
Affected versions of baryton-saxophone insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...
Downloads Resources over HTTP in kindlegen
Affected versions of kindlegen insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the syst...
DSA-4388-2 mosquitto - regression update
Bulletin has no description...
DLA-1677-1 firefox-esr - security update
Bulletin has no description...
DLA-1675-1 python-gnupg - security update
Bulletin has no description...
DLA-1662-1 libthrift-java - security update
Bulletin has no description...
DLA-1665-1 netmask - security update
Bulletin has no description...
DSA-4385-1 dovecot - security update
Bulletin has no description...
DSA-4382-1 rssh - security update
Bulletin has no description...
DLA-1655-1 mariadb-10.0 - security update
Bulletin has no description...
DLA-1651-1 libgd2 - security update
Bulletin has no description...
DLA-1638-1 libjpeg-turbo - security update
Bulletin has no description...
DLA-1631-1 libcaca - security update
Bulletin has no description...