Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2018-06-04 CVE-2016-10695 Cryptographic Issues vulnerability in Mapbox Npm-Test-Sqlite3-Trunk
The npm-test-sqlite3-trunk module provides asynchronous, non-blocking SQLite3 bindings.
network
high complexity
mapbox CWE-310
8.1
2018-06-04 CVE-2018-1600 Cleartext Transmission of Sensitive Information vulnerability in IBM Bigfix Platform
IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel that can be sniffed by unauthorized actors.
network
low complexity
ibm CWE-319
7.5
2018-06-04 CVE-2016-10694 Cryptographic Issues vulnerability in Alto-Saxophone Project Alto-Saxophone
alto-saxophone is a module to install and launch Chromedriver for Mac, Linux or Windows.
network
high complexity
alto-saxophone-project CWE-310
8.1
2018-06-04 CVE-2016-10693 Cryptographic Issues vulnerability in Pm2-Kafka Project Pm2-Kafka 1.0.0
pm2-kafka is a PM2 module that installs and runs a kafka server pm2-kafka downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.
network
high complexity
pm2-kafka-project CWE-310
8.1
2018-06-04 CVE-2016-10692 Cryptographic Issues vulnerability in Haxeshim Project Haxeshim
haxeshim haxe shim to deal with coexisting versions.
network
high complexity
haxeshim-project CWE-310
8.1
2018-06-04 CVE-2016-10691 Cryptographic Issues vulnerability in Windows-Seleniumjar Project Windows-Seleniumjar 2.48.2
windows-seleniumjar is a module that downloads the Selenium Jar file windows-seleniumjar downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.
network
high complexity
windows-seleniumjar-project CWE-310
8.1
2018-06-04 CVE-2016-10690 Cryptographic Issues vulnerability in Openframe-Ascii-Image Project Openframe-Ascii-Image 0.1.0
openframe-ascii-image module is an openframe plugin which adds support for ascii images via fim.
network
high complexity
openframe-ascii-image-project CWE-310
8.1
2018-06-04 CVE-2016-10689 Cryptographic Issues vulnerability in Windows-Iedriver Project Windows-Iedriver 2.48.0
The windows-iedriver module downloads fixed version of iedriverserver.exe windows-iedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.
network
high complexity
windows-iedriver-project CWE-310
8.1
2018-06-04 CVE-2016-10688 Cryptographic Issues vulnerability in Haxe
Haxe 3 : The Cross-Platform Toolkit (a fork from David Mouton's damoebius/haxe-npm) haxe3 downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
network
high complexity
haxe CWE-310
8.1
2018-06-04 CVE-2016-10687 Cryptographic Issues vulnerability in Windows-Selenium-Chromedriver Project Windows-Selenium-Chromedriver 0.1.0
windows-selenium-chromedriver is a module that downloads the Selenium Jar file.
8.1