Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Haxe Clear all filters
TI-2016-08729 CVE-2016-10688 · GHSA-2r9c-46v3-43fc

Cryptographic flaw in HackerOne haxe3 node module

Priority LOW 39

Haxe 3 : The Cross-Platform Toolkit (a fork from David Mouton's damoebius/haxe-npm) haxe3 downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01673 Published 2018-06-04 No fix listed CWE-311
TI-2016-08643 CVE-2016-10602 · GHSA-g785-775g-f2g8

Cryptographic flaw in HackerOne haxe node module

Priority LOW 39

haxe is a cross-platform toolkit haxe downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01656 Published 2018-06-01 Fixed in 5.0.10 CWE-311