Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10658 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T22:10:35.366Z Vendors: HackerOne Products: native-opencv node module Problem Types: CWE-311 Description: native-opencv is the OpenCV library installed via npm native-opencv downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/263
CVE ID: CVE-2016-10659 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T17:08:05.600Z Vendors: HackerOne Products: poco node module Problem Types: CWE-311 Description: poco - The POCO libraries, downloads source file resources used for compilation over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/271
CVE ID: CVE-2016-10660 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T02:27:59.515Z Vendors: HackerOne Products: fis-parser-sass-bin node module Problem Types: CWE-311 Description: fis-parser-sass-bin a plugin for fis to compile sass using node-sass-binaries. fis-parser-sass-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/ad
user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/269
CVE ID: CVE-2016-10661 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T16:24:14.031Z Vendors: HackerOne Products: phantomjs-cheniu node module Problem Types: CWE-311 Description: phantomjs-cheniu is a Headless WebKit with JS API phantomjs-cheniu downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/262
CVE ID: CVE-2016-10662 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T02:11:25.036Z Vendors: HackerOne Products: tomita node module Problem Types: CWE-311 Description: tomita is a node wrapper for Yandex Tomita Parser tomita downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/267
CVE ID: CVE-2016-10663 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T20:48:06.578Z Vendors: HackerOne Products: wixtoolset node module Problem Types: CWE-311 Description: wixtoolset is a Node module wrapper around the wixtoolset binaries wixtoolset downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/264 - https://github.
dditional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/264 - https://github.com/wixtoolset/issues/issues/6187
CVE ID: CVE-2016-10664 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T19:24:06.701Z Vendors: HackerOne Products: mystem node module Problem Types: CWE-311 Description: mystem is a Node.js wrapper for MyStem morphology text analyzer by Yandex.ru mystem downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/259
CVE ID: CVE-2016-10665 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T22:20:27.726Z Vendors: HackerOne Products: herbivore node module Problem Types: CWE-311 Description: herbivore is a packet sniffing and crafting library. Built on libtins herbivore 0.0.3 and below download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samatt/Herbivore/comm
remote server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samatt/Herbivore/commit/0a041defc3463e99948e5d2064aef54b2128c5a3 - https://nodesecurity.io/advisories/258
CVE ID: CVE-2016-10666 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-17T03:39:02.884Z Vendors: HackerOne Products: tomita-parser node module Problem Types: CWE-311 Description: tomita-parser is a Node wrapper for Yandex Tomita Parser tomita-parser downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/261
CVE ID: CVE-2016-10667 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T16:49:01.620Z Vendors: HackerOne Products: selenium-portal node module Problem Types: CWE-311 Description: selenium-portal is a Selenium Testing Framework selenium-portal downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/260
CVE ID: CVE-2016-10668 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T22:45:50.113Z Vendors: HackerOne Products: libsbml node module Problem Types: CWE-311 Description: libsbml is a module that installs Linux binaries for libSBML libsbml downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/272
CVE ID: CVE-2016-10669 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T20:27:38.497Z Vendors: HackerOne Products: soci node module Problem Types: CWE-311 Description: soci downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/270
CVE ID: CVE-2016-10670 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T20:46:43.019Z Vendors: HackerOne Products: windows-seleniumjar-mirror node module Problem Types: CWE-311 Description: windows-seleniumjar-mirror downloads the Selenium Jar file windows-seleniumjar-mirror downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisori
and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/281
CVE ID: CVE-2016-10671 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T23:46:58.252Z Vendors: HackerOne Products: mystem-wrapper node module Problem Types: CWE-311 Description: mystem-wrapper is a Yandex mystem app wrapper module. mystem-wrapper downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/280
CVE ID: CVE-2016-10672 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T03:34:00.636Z Vendors: HackerOne Products: cloudpub-redis node module Problem Types: CWE-311 Description: cloudpub-redis is a module for CloudPub: Redis Backend cloudpub-redis downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/282
CVE ID: CVE-2016-10673 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T01:16:06.952Z Vendors: HackerOne Products: ipip-coffee node module Problem Types: CWE-311 Description: ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/279
CVE ID: CVE-2016-10674 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-17T02:46:58.844Z Vendors: HackerOne Products: limbus-buildgen node module Problem Types: CWE-311 Description: limbus-buildgen is a "build anywhere" build system. limbus-buildgen versions below 0.1.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/276
CVE ID: CVE-2016-10675 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T02:36:56.109Z Vendors: HackerOne Products: libsbmlsim node module Problem Types: CWE-311 Description: libsbmlsim is a module that installs linux binaries for libsbmlsim libsbmlsim downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/275
CVE ID: CVE-2016-10676 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T01:31:56.336Z Vendors: HackerOne Products: rs-brightcove node module Problem Types: CWE-311 Description: rs-brightcove is a wrapper around brightcove's web api rs-brightcove downloads source file resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/273
CVE ID: CVE-2016-10677 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T21:08:30.402Z Vendors: HackerOne Products: google-closure-tools-latest node module Problem Types: CWE-311 Description: google-closure-tools-latest is a Node.js module wrapper for downloading the latest version of the Google Closure tools google-closure-tools-latest downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Pro
attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/274
CVE ID: CVE-2016-10678 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T22:14:54.713Z Vendors: HackerOne Products: serc.js node module Problem Types: CWE-311 Description: serc.js is a Selenium RC process wrapper serc.js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/277
CVE ID: CVE-2016-10679 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T17:52:46.278Z Vendors: HackerOne Products: selenium-standalone-painful node module Problem Types: CWE-311 Description: selenium-standalone-painful installs a start-selenium command line to start a standalone selenium server with chrome-driver. selenium-standalone-painful downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - C
if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/284
CVE ID: CVE-2016-10680 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T22:30:52.903Z Vendors: HackerOne Products: adamvr-geoip-lite node module Problem Types: CWE-311 Description: adamvr-geoip-lite is a light weight native JavaScript implementation of GeoIP API from MaxMind adamvr-geoip-lite downloads geoip resources over HTTP, which leaves it vulnerable to MITM attacks. This impacts the integrity and availability of this geoip data that may alter the decisions made by an application using this data. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/283
CVE ID: CVE-2016-10681 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-17T02:20:41.157Z Vendors: HackerOne Products: roslib-socketio node module Problem Types: CWE-311 Description: roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/a
e user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/292
CVE ID: CVE-2016-10682 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-17T01:21:46.325Z Vendors: HackerOne Products: massif node module Problem Types: CWE-311 Description: massif is a Phantomjs fork massif downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/290
CVE ID: CVE-2016-10683 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T01:11:32.095Z Vendors: HackerOne Products: arcanist node module Problem Types: CWE-311 Description: arcanist downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/286
CVE ID: CVE-2016-10684 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T00:16:26.720Z Vendors: HackerOne Products: healthcenter node module Problem Types: CWE-311 Description: healthcenter - IBM Monitoring and Diagnostic Tools health Center agent healthcenter downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/288
CVE ID: CVE-2016-10685 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T20:17:01.496Z Vendors: HackerOne Products: pk-app-wonderbox node module Problem Types: CWE-311 Description: pk-app-wonderbox is an integration with wonderbox pk-app-wonderbox downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/289
CVE ID: CVE-2016-10686 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T03:38:24.495Z Vendors: HackerOne Products: fis-sass-all node module Problem Types: CWE-311 Description: fis-sass-all is another libsass wrapper for node. fis-sass-all downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/287
CVE ID: CVE-2016-10687 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T23:27:04.981Z Vendors: HackerOne Products: windows-selenium-chromedriver node module Problem Types: CWE-311 Description: windows-selenium-chromedriver is a module that downloads the Selenium Jar file. windows-selenium-chromedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https
tioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/285
CVE ID: CVE-2016-10688 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T01:51:52.519Z Vendors: HackerOne Products: haxe3 node module Problem Types: CWE-311 Description: Haxe 3 : The Cross-Platform Toolkit (a fork from David Mouton's damoebius/haxe-npm) haxe3 downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/294
CVE ID: CVE-2016-10689 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T03:54:53.079Z Vendors: HackerOne Products: windows-iedriver node module Problem Types: CWE-311 Description: The windows-iedriver module downloads fixed version of iedriverserver.exe windows-iedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/29
he remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/293
CVE ID: CVE-2016-10690 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T03:43:57.111Z Vendors: HackerOne Products: openframe-ascii-image node module Problem Types: CWE-311 Description: openframe-ascii-image module is an openframe plugin which adds support for ascii images via fim. openframe-ascii-image downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nod
in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/298