VYPR

CVEs

101,988 total · page 1776 of 2,040

AllCriticalHighKEV
  • CVE-2018-1600HigJun 4, 2018
    IBM
    Bigfix Platform
    risk 0.56cvss 8.6epss 0.01

    IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel that can be sniffed by unauthorized actors. IBM X-Force ID: 143745.

  • CVE-2016-10694HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    alto-saxophone is a module to install and launch Chromedriver for Mac, Linux or Windows. alto-saxophone versions below 2.25.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out…

  • CVE-2016-10693HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    pm2-kafka is a PM2 module that installs and runs a kafka server pm2-kafka downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled…

  • CVE-2016-10692HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.03

    haxeshim haxe shim to deal with coexisting versions. haxeshim downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the…

  • CVE-2016-10691HigJun 4, 2018
    Hackerone
    Windows Seleniumjar Node Module
    risk 0.53cvss 8.1epss 0.02

    windows-seleniumjar is a module that downloads the Selenium Jar file windows-seleniumjar downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an…

  • CVE-2016-10690HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    openframe-ascii-image module is an openframe plugin which adds support for ascii images via fim. openframe-ascii-image downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested…

  • CVE-2016-10689HigJun 4, 2018
    Hackerone
    Windows Iedriver Node Module
    risk 0.53cvss 8.1epss 0.02

    The windows-iedriver module downloads fixed version of iedriverserver.exe windows-iedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an…

  • CVE-2016-10688HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    Haxe 3 : The Cross-Platform Toolkit (a fork from David Mouton's damoebius/haxe-npm) haxe3 downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker…

  • CVE-2016-10687HigJun 4, 2018
    Hackerone
    Windows Seleniumjar Node Module
    risk 0.53cvss 8.1epss 0.02

    windows-selenium-chromedriver is a module that downloads the Selenium Jar file. windows-selenium-chromedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested…

  • CVE-2016-10686HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    fis-sass-all is another libsass wrapper for node. fis-sass-all downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if…

  • CVE-2016-10685HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    pk-app-wonderbox is an integration with wonderbox pk-app-wonderbox downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy…

  • CVE-2016-10684HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    healthcenter - IBM Monitoring and Diagnostic Tools health Center agent healthcenter downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker…

  • CVE-2016-10683HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    arcanist downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the…

  • CVE-2016-10678HigJun 4, 2018
    Hackerone
    Uri Js Node Module
    risk 0.53cvss 8.1epss 0.02

    serc.js is a Selenium RC process wrapper serc.js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is…

  • CVE-2016-10677HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    google-closure-tools-latest is a Node.js module wrapper for downloading the latest version of the Google Closure tools google-closure-tools-latest downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution…

  • CVE-2016-10676HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    rs-brightcove is a wrapper around brightcove's web api rs-brightcove downloads source file resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled…

  • CVE-2016-10675HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    libsbmlsim is a module that installs linux binaries for libsbmlsim libsbmlsim downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker…

  • CVE-2016-10673HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.01

    ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application.

  • CVE-2016-10672HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    cloudpub-redis is a module for CloudPub: Redis Backend cloudpub-redis downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled…

  • CVE-2016-10671HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    mystem-wrapper is a Yandex mystem app wrapper module. mystem-wrapper downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy…

  • CVE-2016-10670HigJun 4, 2018
    Hackerone
    Windows Seleniumjar Node Module
    risk 0.53cvss 8.1epss 0.02

    windows-seleniumjar-mirror downloads the Selenium Jar file windows-seleniumjar-mirror downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an…

  • CVE-2016-10669HigJun 4, 2018
    Hackerone
    Sspa Node Module
    risk 0.53cvss 8.1epss 0.02

    soci downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the…

  • CVE-2016-10668HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    libsbml is a module that installs Linux binaries for libSBML libsbml downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the…

  • CVE-2016-10667HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    selenium-portal is a Selenium Testing Framework selenium-portal downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if…

  • CVE-2016-10665HigJun 4, 2018
    risk 0.46cvss 8.1epss 0.02

    herbivore is a packet sniffing and crafting library. Built on libtins herbivore 0.0.3 and below download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with…

  • CVE-2016-10664HigJun 4, 2018
    Hackerone
    Mysql Node Module
    risk 0.53cvss 8.1epss 0.02

    mystem is a Node.js wrapper for MyStem morphology text analyzer by Yandex.ru mystem downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker…

  • CVE-2016-10663HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    wixtoolset is a Node module wrapper around the wixtoolset binaries wixtoolset downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker…

  • CVE-2016-10662HigJun 4, 2018
    Hackerone
    Tomita Node Module
    risk 0.53cvss 8.1epss 0.02

    tomita is a node wrapper for Yandex Tomita Parser tomita downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the…

  • CVE-2016-10661HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    phantomjs-cheniu is a Headless WebKit with JS API phantomjs-cheniu downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy…

  • CVE-2016-10660HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    fis-parser-sass-bin a plugin for fis to compile sass using node-sass-binaries. fis-parser-sass-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources…

  • CVE-2016-10657HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    co-cli-installer downloads the co-cli module as part of the install process, but does so over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the…

  • CVE-2016-10656HigJun 4, 2018
    Hackerone
    Sspa Node Module
    risk 0.53cvss 8.1epss 0.02

    qbs is a build tool that helps simplify the build process for developing projects across multiple platforms. qbs downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the…

  • CVE-2016-10655HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    The clang-extra module installs LLVM's clang-extra tools. clang-extra downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled…

  • CVE-2016-10654HigJun 4, 2018
    Hackerone
    Sfml Node Module
    risk 0.53cvss 8.1epss 0.01

    sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

  • CVE-2016-10653HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    xd-testing is a testing library for cross-device (XD) web applications. xd-testing downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker…

  • CVE-2016-10652HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.01

    prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

  • CVE-2016-10651HigJun 4, 2018
    Hackerone
    Webdriver Launcher Node Module
    risk 0.53cvss 8.1epss 0.02

    webdriver-launcher is a Node.js Selenium Webdriver Launcher. webdriver-launcher downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker…

  • CVE-2016-10649HigJun 4, 2018
    Hackerone
    Riot Compiler Node Module
    risk 0.53cvss 8.1epss 0.02

    frames-compiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in…

  • CVE-2016-10648HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    marionette-socket-host is a marionette-js-runner host for sending actions over a socket. marionette-socket-host downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested…

  • CVE-2016-10647HigJun 4, 2018
    Hackerone
    Airbrake Node Module
    risk 0.53cvss 8.1epss 0.02

    node-air-sdk is an AIR SDK for nodejs. node-air-sdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker…

  • CVE-2016-10646HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    resourcehacker is a Node wrapper of Resource Hacker (windows executable resource editor). resourcehacker downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary…

  • CVE-2016-10645HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    grunt-images is a grunt plugin for processing images. grunt-images downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if…

  • CVE-2016-10644HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    slimerjs-edge is a npm wrapper for installing the bleeding edge version of slimerjs. slimerjs-edge downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with…

  • CVE-2016-10643HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    jstestdriver is a wrapper for Google's jstestdriver. jstestdriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if…

  • CVE-2016-10642HigJun 4, 2018
    Hackerone
    Airbrake Node Module
    risk 0.53cvss 8.1epss 0.02

    cmake installs the cmake x86 linux binaries. cmake downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is…

  • CVE-2016-10641HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.01

    node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

  • CVE-2016-10640HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    node-thulac is a node binding for thulac. node-thulac downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker…

  • CVE-2016-10639HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    redis-srvr is a npm wrapper for redis-server. redis-srvr downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the…

  • CVE-2016-10638HigJun 4, 2018
    Hackerone
    Uri Js Node Module
    risk 0.46cvss 8.1epss 0.02

    js-given is a JavaScript frontend to jgiven. js-given downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker…

  • CVE-2016-10637HigJun 4, 2018
    risk 0.53cvss 8.1epss 0.02

    haxe-dev is a cross-platform toolkit. haxe-dev downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on…