Lucene search
+L

580 matches found

Kitploit
Kitploit
•added 2026/10/27 2:45 a.m.•19 views

Search-log4Jvuln-AppScanSTD

Search log4J vuln using AppScan Standard and a list of websites This Powershell script run AppScan Standard scans against a list of web sites URLs.txt checking just for Log4J CVE-2021-44228 vulnerability. Structure of project: After run the script, it will read each line in URLs.txt and start...

10CVSS7.8AI score0.99999EPSS
SaveExploits392
NVD
NVD
•added 2026/10/22 9:17 a.m.•10 views

CVE-2026-21811

HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution. Depending on the pipeline configuration, these secrets could be exposed through task outputs, debug logs, environment variable...

3.8CVSS0.00183EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/22 9:17 a.m.•11 views

CVE-2026-21812

HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been...

2.2CVSS0.00144EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/22 9:07 a.m.•32 views

CVE-2026-21812 Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)

HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been...

2.2CVSS0.00144EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/22 9:07 a.m.•8 views

CVE-2026-21812 Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)

HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been...

2.2CVSS5.9AI score0.00144EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/22 9:07 a.m.•9 views

EUVD-2026-108086

HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been...

2.2CVSS5.9AI score0.00144EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/22 9:07 a.m.•12 views

CVE-2026-21812

The HCL AppScan Azure Boards Plugin is vulnerable to a Cleartext Transmission of Sensitive Information (CWE-319) vulnerability. This issue occurs when the plugin is configured to communicate with the AppScan server over HTTP , potentially allowing an attacker to intercept credentials or authentic...

2.2CVSS5.9AI score0.00144EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/22 9:06 a.m.•29 views

CVE-2026-21811 Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)

HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution. Depending on the pipeline configuration, these secrets could be exposed through task outputs, debug logs, environment variable...

3.8CVSS0.00183EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/22 9:06 a.m.•15 views

CVE-2026-21811

The HCL AppScan Azure Boards Plugin is affected by an Information Disclosure vulnerability (CWE-522) where secrets may be accessible in plaintext during pipeline execution. Depending on the pipeline configuration, these secrets could be exposed through task outputs , debug logs , environment vari...

3.8CVSS5.9AI score0.00183EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/22 9:06 a.m.•9 views

EUVD-2026-108085

HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution. Depending on the pipeline configuration, these secrets could be exposed through task outputs, debug logs, environment variable...

3.8CVSS6AI score0.00183EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•7 views

PT-2026-121321

HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution. Depending on the pipeline configuration, these secrets could be exposed through task outputs, debug logs, environment variable...

3.8CVSS6AI score0.00183EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•6 views

PT-2026-121322

HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been...

2.2CVSS6AI score0.00144EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/10/22 12:00 a.m.•2 views

HCL AppScan Integration with Azure Boards for ASoC & A360 encryption issue vulnerability

The HCL AppScan Integration with Azure Boards for ASoC & A360 version 1.0.0 contains an encryption-related vulnerability. This vulnerability arises when sensitive information is transmitted in plaintext via HTTP to the AppScan server, potentially allowing attackers to intercept credentials or...

2.2CVSS5.9AI score0.00144EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/10/21 4:00 p.m.•4 views

Vulnerability related to trust management issues in HCL AppScan integration with Azure Boards for ASoC & A360

The HCL AppScan integration with Azure Boards for ASoC and A360 version 1.0.0 contains a trust management vulnerability. This vulnerability arises because sensitive information can be accessed in plaintext during pipeline execution. Even though it is masked in the user interface, it may still be...

3.8CVSS5.9AI score0.00183EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 9:16 a.m.•25 views

CVE-2026-21822

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...

6.3CVSS0.00315EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 8:32 a.m.•17 views

EUVD-2026-82851

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...

6.3CVSS5.8AI score0.00315EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/18 8:32 a.m.•52 views

CVE-2026-21822 A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822).

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...

6.3CVSS0.00315EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 8:32 a.m.•30 views

CVE-2026-21822

HCL AppScan 360° is affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized file modif...

6.3CVSS5.8AI score0.00315EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/18 8:32 a.m.•19 views

CVE-2026-21822 A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822).

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...

6.3CVSS5.8AI score0.00315EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•9 views

CVE-2026-21822: Improper Limitation of a Pathname to a Restricted Directory

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...

6.3CVSS5.8AI score0.00315EPSS
SaveExploits0References2
Rows per page
Query Builder