Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2018-06-04 CVE-2016-10688 Cryptographic Issues vulnerability in Haxe
Haxe 3 : The Cross-Platform Toolkit (a fork from David Mouton's damoebius/haxe-npm) haxe3 downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
network
high complexity
haxe CWE-310
8.1
2018-06-04 CVE-2016-10687 Cryptographic Issues vulnerability in Windows-Selenium-Chromedriver Project Windows-Selenium-Chromedriver 0.1.0
windows-selenium-chromedriver is a module that downloads the Selenium Jar file.
8.1
2018-06-04 CVE-2016-10686 Cryptographic Issues vulnerability in Fis-Sass-All Project Fis-Sass-All 0.2.0
fis-sass-all is another libsass wrapper for node.
network
high complexity
fis-sass-all-project CWE-310
8.1
2018-06-04 CVE-2016-10685 Cryptographic Issues vulnerability in Pk-App-Wonderbox Project Pk-App-Wonderbox 1.0.0
pk-app-wonderbox is an integration with wonderbox pk-app-wonderbox downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.
network
high complexity
pk-app-wonderbox-project CWE-310
8.1
2018-06-04 CVE-2016-10684 Cryptographic Issues vulnerability in Healthcenter Project Healthcenter 3.0.3
healthcenter - IBM Monitoring and Diagnostic Tools health Center agent healthcenter downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.
network
high complexity
healthcenter-project CWE-310
8.1
2018-06-04 CVE-2016-10683 Cryptographic Issues vulnerability in Hujiang Arcanist 0.0.1
arcanist downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
network
high complexity
hujiang CWE-310
8.1
2018-06-04 CVE-2016-10678 Cryptographic Issues vulnerability in Serc.Js Project Serc.Js 0.0.1
serc.js is a Selenium RC process wrapper serc.js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.
network
high complexity
serc-js-project CWE-310
8.1
2018-06-04 CVE-2016-10677 Cryptographic Issues vulnerability in Google-Closure-Tools-Latest Project Google-Closure-Tools-Latest 0.1.0/0.1.1
google-closure-tools-latest is a Node.js module wrapper for downloading the latest version of the Google Closure tools google-closure-tools-latest downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.
8.1
2018-06-04 CVE-2016-10676 Cryptographic Issues vulnerability in Rs-Brightcove Project Rs-Brightcove 0.0.1/0.0.2
rs-brightcove is a wrapper around brightcove's web api rs-brightcove downloads source file resources over HTTP, which leaves it vulnerable to MITM attacks.
network
high complexity
rs-brightcove-project CWE-310
8.1
2018-06-04 CVE-2016-10675 Cryptographic Issues vulnerability in Libsbmlsim Project Libsbmlsim 0.0.1/0.0.2
libsbmlsim is a module that installs linux binaries for libsbmlsim libsbmlsim downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.
network
high complexity
libsbmlsim-project CWE-310
8.1