Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10587 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T17:13:54.056Z Vendors: HackerOne Products: wasdk node module Problem Types: CWE-311 Description: wasdk is a toolkit for creating WebAssembly modules. wasdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/179
CVE ID: CVE-2016-10588 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T23:16:00.325Z Vendors: HackerOne Products: nw node module Problem Types: CWE-311 Description: nw is an installer for nw.js. nw downloads zipped resources over HTTP, It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/166
CVE ID: CVE-2016-10589 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T22:25:55.094Z Vendors: HackerOne Products: selenium-binaries node module Problem Types: CWE-311 Description: selenium-binaries downloads Selenium related binaries for your OS. selenium-binaries downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/175
CVE ID: CVE-2016-10590 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T17:54:44.496Z Vendors: HackerOne Products: cue-sdk-node node module Problem Types: CWE-311 Description: cue-sdk-node is a Corsair Cue SDK wrapper for node.js. cue-sdk-node downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip file if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/190
CVE ID: CVE-2016-10591 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T20:36:34.181Z Vendors: HackerOne Products: prince node module Problem Types: CWE-311 Description: Prince is a Node API for executing XML/HTML to PDF renderer PrinceXML via prince(1) CLI. prince downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested tarball with an attacker controlled tarball if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/185
CVE ID: CVE-2016-10592 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T03:59:08.695Z Vendors: HackerOne Products: jser-stat node module Problem Types: CWE-311 Description: jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/188 - https://github.com/jser/stat-js/blob/master/data/url-mapping.js
CVE ID: CVE-2016-10593 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T22:57:06.559Z Vendors: HackerOne Products: ibapi node module Problem Types: CWE-311 Description: ibapi is an Interactive Brokers API addon for NodeJS. ibapi downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. Before 2.5.6, it may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/ibapi/v/2.5.6 - https://nodesecurity
Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/ibapi/v/2.5.6 - https://nodesecurity.io/advisories/182 - https://gitlord.com/commitdiff/~dchem%2Fnode-ibapi-addon.git/c00dd7c98cca0423052148337e523eeb7776da68 - https://gitlord.com/summary/~dchem%2Fnode-ibapi-addon.git
CVE ID: CVE-2016-10594 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T22:29:58.195Z Vendors: HackerOne Products: ipip node module Problem Types: CWE-311 Description: ipip is a Node.js module to query geolocation information for an IP or domain, based on database by ipip.net. ipip downloads data resources over HTTP, which leaves it vulnerable to MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/184
CVE ID: CVE-2016-10595 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T02:06:34.048Z Vendors: HackerOne Products: jdf-sass node module Problem Types: CWE-311 Description: jdf-sass is a fork from node-sass, jdf use only. jdf-sass downloads executable resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested file with an attacker controlled file if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/198
CVE ID: CVE-2016-10596 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T00:40:50.717Z Vendors: HackerOne Products: imageoptim node module Problem Types: CWE-311 Description: imageoptim is a Node.js wrapper for some images compression algorithms. imageoptim downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested tarball with an attacker controlled tarball if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/194
CVE ID: CVE-2016-10597 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T01:01:45.608Z Vendors: HackerOne Products: cobalt-cli node module Problem Types: CWE-311 Description: cobalt-cli downloads resources over HTTP, which leaves it vulnerable to MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/197
CVE ID: CVE-2016-10598 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T19:40:03.202Z Vendors: HackerOne Products: arrayfire-js node module Problem Types: CWE-311 Description: arrayfire-js is a module for ArrayFire for the Node.js platform. arrayfire-js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/192
CVE ID: CVE-2016-10599 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T17:08:40.165Z Vendors: HackerOne Products: sauce-connect node module Problem Types: CWE-311 Description: sauce-connect is a Node.js wrapper over the SauceLabs SauceConnect.jar program for establishing a secure tunnel for intranet testing. sauce-connect downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container
n the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/186
CVE ID: CVE-2016-10600 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T22:20:03.139Z Vendors: HackerOne Products: webrtc-native node module Problem Types: CWE-311 Description: webrtc-native uses WebRTC from chromium project. webrtc-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/176
CVE ID: CVE-2016-10601 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-17T04:18:48.609Z Vendors: HackerOne Products: webdrvr node module Problem Types: CWE-311 Description: webdrvr is a npm wrapper for Selenium Webdriver including Chromedriver / IEDriver / IOSDriver / Ghostdriver. webdrvr downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.
n the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/193
CVE ID: CVE-2016-10602 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T03:17:58.934Z Vendors: HackerOne Products: haxe node module Problem Types: CWE-311 Description: haxe is a cross-platform toolkit haxe downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip file if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/177
CVE ID: CVE-2016-10603 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T03:23:52.030Z Vendors: HackerOne Products: air-sdk node module Problem Types: CWE-311 Description: air-sdk is a NPM wrapper for the Adobe AIR SDK. air-sdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/200
CVE ID: CVE-2016-10604 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T02:47:41.094Z Vendors: HackerOne Products: dalek-browser-chrome node module Problem Types: CWE-311 Description: dalek-browser-chrome is Google Chrome bindings for DalekJS. dalek-browser-chrome downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/199
CVE ID: CVE-2016-10605 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T04:24:06.306Z Vendors: HackerOne Products: dalek-browser-ie node module Problem Types: CWE-311 Description: dalek-browser-ie is Internet Explorer bindings for DalekJS. dalek-browser-ie downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/209
CVE ID: CVE-2016-10606 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T00:55:44.362Z Vendors: HackerOne Products: grunt-webdriver-qunit node module Problem Types: CWE-311 Description: grunt-webdriver-qunit is a grunt plugin to run qunit with webdriver in grunt grunt-webdriver-qunit downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/a
e user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/207
CVE ID: CVE-2016-10607 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T22:40:19.234Z Vendors: HackerOne Products: openframe-glslviewer node module Problem Types: CWE-311 Description: openframe-glsviewer is a Openframe extension which adds support for shaders via glslViewer. openframe-glsviewer downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodes
n between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/208
CVE ID: CVE-2016-10608 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T00:10:34.045Z Vendors: HackerOne Products: robot-js node module Problem Types: CWE-311 Description: robot-js is a module for native system automation for node.js. robot-js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/201
CVE ID: CVE-2016-10609 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T16:43:23.996Z Vendors: HackerOne Products: chromedriver126 node module Problem Types: CWE-311 Description: chromedriver126 is chromedriver version 1.26 for linux OS. chromedriver126 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/203
CVE ID: CVE-2016-10610 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T04:29:20.044Z Vendors: HackerOne Products: unicode-json node module Problem Types: CWE-311 Description: unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/206
CVE ID: CVE-2016-10611 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T20:26:34.568Z Vendors: HackerOne Products: strider-sauce node module Problem Types: CWE-311 Description: strider-sauce is Sauce Labs / Selenium support for Strider. strider-sauce downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip file if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/202
CVE ID: CVE-2016-10612 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T02:37:40.561Z Vendors: HackerOne Products: dalek-browser-ie-canary node module Problem Types: CWE-311 Description: dalek-browser-ie-canary is Internet Explorer bindings for DalekJS. dalek-browser-ie-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisor
and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/205
CVE ID: CVE-2016-10613 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T18:29:00.314Z Vendors: HackerOne Products: bionode-sra node module Problem Types: CWE-311 Description: bionode-sra is a Node.js wrapper for SRA Toolkit. bionode-sra downloads data resources over HTTP, which leaves it vulnerable to MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/211
CVE ID: CVE-2016-10614 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T02:26:59.820Z Vendors: HackerOne Products: httpsync node module Problem Types: CWE-311 Description: httpsync is a port of libcurl to node.js. httpsync downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/210
CVE ID: CVE-2016-10615 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T16:38:19.695Z Vendors: HackerOne Products: curses node module Problem Types: CWE-311 Description: curses is bindings for the native curses library, a full featured console IO library. curses downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/215
CVE ID: CVE-2016-10616 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T23:25:58.326Z Vendors: HackerOne Products: openframe-image node module Problem Types: CWE-311 Description: openframe-image is an Openframe extension which adds support for images via fbi. openframe-image downloads data resources over HTTP, which leaves it vulnerable to MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/218
CVE ID: CVE-2016-10617 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T23:55:27.654Z Vendors: HackerOne Products: box2d-native node module Problem Types: CWE-311 Description: box2d-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/219
CVE ID: CVE-2016-10618 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T18:18:18.244Z Vendors: HackerOne Products: node-browser node module Problem Types: CWE-311 Description: node-browser is a wrapper webdriver by nodejs. node-browser downloads resources over HTTP, which leaves it vulnerable to MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/214
CVE ID: CVE-2016-10619 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T00:56:48.996Z Vendors: HackerOne Products: pennyworth node module Problem Types: CWE-311 Description: pennyworth is a natural language templating engine. pennyworth downloads data resources over HTTP, which leaves it vulnerable to MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/213
CVE ID: CVE-2016-10620 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T22:09:11.870Z Vendors: HackerOne Products: atom-node-module-installer node module Problem Types: CWE-311 Description: atom-node-module-installer installs node modules for atom-shell applications. atom-node-module-installer binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/
he user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/216
CVE ID: CVE-2016-10621 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-16T17:14:52.722Z Vendors: HackerOne Products: fibjs node module Problem Types: CWE-311 Description: fibjs is a runtime for javascript applictions built on google v8 JS. fibjs downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/217
CVE ID: CVE-2016-10622 State: PUBLISHED Published: 2018-06-01T18:00:00Z Last Updated: 2024-09-17T03:37:43.283Z Vendors: HackerOne Products: nodeschnaps node module Problem Types: CWE-311 Description: nodeschnaps is a NodeJS compatibility layer for Java (Rhino). nodeschnaps downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/212