Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10623 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T23:02:11.897Z Vendors: HackerOne Products: macaca-chromedriver-zxa node module Problem Types: CWE-311 Description: macaca-chromedriver-zxa is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver-zxa downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.i
the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/221
CVE ID: CVE-2016-10624 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T23:45:48.557Z Vendors: HackerOne Products: selenium-chromedriver node module Problem Types: CWE-311 Description: selenium-chromedriver is a simple utility for downloading the Selenium Webdriver for Google Chrome selenium-chromedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - htt
sitioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/222
CVE ID: CVE-2016-10625 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T03:43:06.522Z Vendors: HackerOne Products: headless-browser-lite node module Problem Types: CWE-311 Description: headless-browser-lite is a minimal npm installer for phantomjs and slimerjs with no external dependencies. headless-browser-lite downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: Reference
rk or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/230
CVE ID: CVE-2016-10626 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T00:17:29.653Z Vendors: HackerOne Products: mystem3 node module Problem Types: CWE-311 Description: mystem3 is a NodeJS wrapper for the Yandex MyStem 3. mystem3 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/229
CVE ID: CVE-2016-10627 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T17:08:31.215Z Vendors: HackerOne Products: scala-bin node module Problem Types: CWE-311 Description: scala-bin is a binary wrapper for Scala. scala-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/227
CVE ID: CVE-2016-10628 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T03:42:50.199Z Vendors: HackerOne Products: selenium-wrapper node module Problem Types: CWE-311 Description: selenium-wrapper is a selenium server wrapper, including installation and chrome webdriver. selenium-wrapper downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity
en the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/224
CVE ID: CVE-2016-10629 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T23:52:05.905Z Vendors: HackerOne Products: nw-with-arm node module Problem Types: CWE-311 Description: nw-with-arm is a NW Installer including ARM-Build. nw-with-arm downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/226
CVE ID: CVE-2016-10630 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T01:21:00.795Z Vendors: HackerOne Products: install-g-test node module Problem Types: CWE-311 Description: install-g-test downloads resources over HTTP, which leaves it vulnerable to MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/228
CVE ID: CVE-2016-10631 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T00:17:09.947Z Vendors: HackerOne Products: jvminstall node module Problem Types: CWE-311 Description: jvminstall is a module for downloading and unpacking jvm to local system. jvminstall downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/225
CVE ID: CVE-2016-10632 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T20:11:24.802Z Vendors: HackerOne Products: apk-parser2 node module Problem Types: CWE-311 Description: apk-parser2 is a module which extracts Android Manifest info from an APK file. apk-parser2 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/223
CVE ID: CVE-2016-10633 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T22:25:39.736Z Vendors: HackerOne Products: dwebp-bin node module Problem Types: CWE-311 Description: dwebp-bin is a dwebp node.js wrapper that convert WebP into PNG. dwebp-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/232
CVE ID: CVE-2016-10634 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T17:38:05.451Z Vendors: HackerOne Products: scalajs-standalone-bin node module Problem Types: CWE-311 Description: scala-standalone-bin is a Binary wrapper for ScalaJS. scala-standalone-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/231
CVE ID: CVE-2016-10635 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T19:09:07.141Z Vendors: HackerOne Products: broccoli-closure node module Problem Types: CWE-311 Description: broccoli-closure is a Closure compiler plugin for Broccoli. broccoli-closure before 1.3.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/242
CVE ID: CVE-2016-10636 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T17:57:57.444Z Vendors: HackerOne Products: grunt-ccompiler node module Problem Types: CWE-311 Description: grunt-ccompiler is a Closure Compiler Grunt Plugin. grunt-ccompiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/239
CVE ID: CVE-2016-10637 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T01:36:38.265Z Vendors: HackerOne Products: haxe-dev node module Problem Types: CWE-311 Description: haxe-dev is a cross-platform toolkit. haxe-dev downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/237
CVE ID: CVE-2016-10638 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T17:43:24.772Z Vendors: HackerOne Products: js-given node module Problem Types: CWE-311 Description: js-given is a JavaScript frontend to jgiven. js-given downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/241
CVE ID: CVE-2016-10639 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T00:56:14.613Z Vendors: HackerOne Products: redis-srvr node module Problem Types: CWE-311 Description: redis-srvr is a npm wrapper for redis-server. redis-srvr downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/238
CVE ID: CVE-2016-10640 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T03:02:53.433Z Vendors: HackerOne Products: node-thulac node module Problem Types: CWE-311 Description: node-thulac is a node binding for thulac. node-thulac downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/236
CVE ID: CVE-2016-10641 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T02:26:43.954Z Vendors: HackerOne Products: node-bsdiff-android node module Problem Types: CWE-311 Description: node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/234
CVE ID: CVE-2016-10642 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T00:26:32.715Z Vendors: HackerOne Products: cmake node module Problem Types: CWE-311 Description: cmake installs the cmake x86 linux binaries. cmake downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/233
CVE ID: CVE-2016-10643 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T00:21:27.841Z Vendors: HackerOne Products: jstestdriver node module Problem Types: CWE-311 Description: jstestdriver is a wrapper for Google's jstestdriver. jstestdriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/244
CVE ID: CVE-2016-10644 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T00:02:06.582Z Vendors: HackerOne Products: slimerjs-edge node module Problem Types: CWE-311 Description: slimerjs-edge is a npm wrapper for installing the bleeding edge version of slimerjs. slimerjs-edge downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisorie
nd the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/243
CVE ID: CVE-2016-10645 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T02:57:06.637Z Vendors: HackerOne Products: grunt-images node module Problem Types: CWE-311 Description: grunt-images is a grunt plugin for processing images. grunt-images downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/255
CVE ID: CVE-2016-10646 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T02:47:15.435Z Vendors: HackerOne Products: resourcehacker node module Problem Types: CWE-311 Description: resourcehacker is a Node wrapper of Resource Hacker (windows executable resource editor). resourcehacker downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/ad
user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/254
CVE ID: CVE-2016-10647 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T18:24:16.458Z Vendors: HackerOne Products: node-air-sdk node module Problem Types: CWE-311 Description: node-air-sdk is an AIR SDK for nodejs. node-air-sdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/250
CVE ID: CVE-2016-10648 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T04:14:10.920Z Vendors: HackerOne Products: marionette-socket-host node module Problem Types: CWE-311 Description: marionette-socket-host is a marionette-js-runner host for sending actions over a socket. marionette-socket-host downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nod
in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/252
CVE ID: CVE-2016-10649 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T18:23:36.978Z Vendors: HackerOne Products: frames-compiler node module Problem Types: CWE-311 Description: frames-compiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/247
CVE ID: CVE-2016-10650 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T17:08:14.161Z Vendors: HackerOne Products: ntfserver node module Problem Types: CWE-311 Description: ntfserver is a Network Testing Framework Server. ntfserver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/253
CVE ID: CVE-2016-10651 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T21:08:03.603Z Vendors: HackerOne Products: webdriver-launcher node module Problem Types: CWE-311 Description: webdriver-launcher is a Node.js Selenium Webdriver Launcher. webdriver-launcher downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/246
CVE ID: CVE-2016-10652 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T22:10:18.074Z Vendors: HackerOne Products: prebuild-lwip node module Problem Types: CWE-311 Description: prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads resources over HTTP, which leaves it vulnerable to MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/248
CVE ID: CVE-2016-10653 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T23:25:32.306Z Vendors: HackerOne Products: xd-testing node module Problem Types: CWE-311 Description: xd-testing is a testing library for cross-device (XD) web applications. xd-testing downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/257
CVE ID: CVE-2016-10654 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T16:13:24.860Z Vendors: HackerOne Products: sfml node module Problem Types: CWE-311 Description: sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/256
CVE ID: CVE-2016-10655 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-16T20:47:53.082Z Vendors: HackerOne Products: clang-extra node module Problem Types: CWE-311 Description: The clang-extra module installs LLVM's clang-extra tools. clang-extra downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/265
CVE ID: CVE-2016-10656 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T02:32:45.932Z Vendors: HackerOne Products: qbs node module Problem Types: CWE-311 Description: qbs is a build tool that helps simplify the build process for developing projects across multiple platforms. qbs downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advi
ser and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/266
CVE ID: CVE-2016-10657 State: PUBLISHED Published: 2018-06-04T16:00:00Z Last Updated: 2024-09-17T03:34:22.989Z Vendors: HackerOne Products: co-cli-installer node module Problem Types: CWE-311 Description: co-cli-installer downloads the co-cli module as part of the install process, but does so over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/268