CVE-2021-44228-Log4j

Pon a prueba este contenido antes de aplicarlo a sistemas de producción. Uso Descarga el último paquete desde las versiones aquí: https://github.com/VerveIndustrialProtection/CVE-2021-44228-Log4j/releases y luego importa los Fixlets, los análisis y el grupo de equipos en un sitio y aplica las...

IBM BigFix Platform - Information Disclosure

IBM BigFix Platform 9.2 and 9.5 contains an information disclosure vulnerability caused by not enabling authenticated access in relay, letting remote attackers query and gather update and fixlet information, exploit requires no authentication. id: CVE-2019-4061 info: name: IBM BigFix Platform -...

BigFix-CopyFail-AlmaLinux-Content

This repository does not have a README...

EUVD-2026-66805

HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...

EUVD-2026-66806

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...

EUVD-2026-66757

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

EUVD-2026-66775

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...

CVE-2026-21807

HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...

CVE-2026-21808

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...

CVE-2026-21809

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

CVE-2026-21810

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...

CVE-2026-21808

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default, which can expose sensitive data and reveal internal application logic and architectural details to an attacker. The flaw is scored CVSS 4.1 (MEDIUM) , requiring a local attack with high complexity and high ...

CVE-2026-21808 HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...

CVE-2026-21807 HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow

HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...

CVE-2026-21807

HCL BigFix Quantum Risk Analyzer is affected by a vulnerability in its binary, which lacks several critical, industry-standard hardening protections. This absence could allow an attacker to cause a stack-based buffer overflow , potentially leading to crashes or arbitrary code execution. Affected ...

CVE-2026-21810 HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checking

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...

CVE-2026-21810

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity checking , which could allow an attacker to obtain sensitive information or modify the binary. The CVSS v3.1 base score is 4.4 (Medium) , with a local attack vector and high priv...

CVE-2026-21809 HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

CVE-2026-21809

HCL BigFix Quantum Risk Analyzer contains a validation process that returns overly descriptive error messages when processing malformed input, enabling an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input. The CVSS 3.1 score is 3.9 (LOW...

PT-2026-82330

Name of the Vulnerable Software and Affected Versions HCL BigFix Quantum Risk Analyzer affected versions not specified Description The software generates highly detailed logging information by default. This behavior increases the risk of sensitive data leakage and may allow an attacker to gain...