Skip to content

Vendor

haxe vulnerabilities

3 published CVES affecting haxe, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
3
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of haxe alerts

Products

Latest haxe CVEs

Newest publication first

  1. CVE-2016-10637 Downloads Resources over HTTP in haxe-dev

    Published
    HighCVSS 8.1 EPSS 1.7%

    haxe-dev is a cross-platform toolkit. haxe-dev downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on t...

  2. CVE-2016-10688 Downloads Resources over HTTP in haxe3

    Published
    HighCVSS 8.1 EPSS 1.7%

    Haxe 3 : The Cross-Platform Toolkit (a fork from David Mouton's damoebius/haxe-npm) haxe3 downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker co...

  3. CVE-2016-10602 Downloads Resources over HTTP in haxe

    Published
    HighCVSS 8.1 EPSS 1.6%

    haxe is a cross-platform toolkit haxe downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip file if the attacker is on the ne...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.