Lucene search
K

109 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-9805

Malware in sbrugna...

8.1CVSS8.2AI score0.00359EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-6407

Malware in sbrugna...

7.5CVSS7.6AI score0.00151EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-9786

Malware in sbrugna...

6.1CVSS6.3AI score0.00154EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-9792

Malware in sbrugna...

5.5CVSS5.5AI score0.00046EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-9806

Malware in sbrugna...

5.5CVSS5.5AI score0.00054EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-9802

Malware in sbrugna...

5.3CVSS5.5AI score0.00233EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-9788

Malware in sbrugna...

5.5CVSS5.5AI score0.00046EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-6401

Malware in sbrugna...

5.3CVSS5.5AI score0.00131EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-9789

Malware in sbrugna...

9.8CVSS9.5AI score0.02438EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-39893

Malicious code in bioql PyPI...

3.1CVSS6.6AI score0.00066EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-21035

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.00384EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:43 p.m.4 views

CVE-2020-14254

TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it...

7.5CVSS6.9AI score0.00151EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 3:13 p.m.5 views

CVE-2020-14248

BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie...

5.3CVSS7AI score0.00131EPSS
Exploits0
NVD
NVD
added 2024/12/17 6:15 p.m.38 views

CVE-2024-42194

An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call...

3.1CVSS0.00066EPSS
Exploits0References1
CVE
CVE
added 2024/12/17 5:28 p.m.111 views

CVE-2024-42194

CVE-2024-42194 affects HCL BigFix Inventory: an access-control vulnerability arising from improper handling of permissions allows a read-only account to modify certain configuration parameters via a crafted REST API call. The available documents confirm the affected product and the underlying iss...

3.1CVSS4.1AI score0.00066EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/17 5:28 p.m.6 views

CVE-2024-42194 HCL BigFix Inventory is affected by an access control vulnerability

An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call...

3.1CVSS7.2AI score0.00066EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/17 5:28 p.m.49 views

CVE-2024-42194 HCL BigFix Inventory is affected by an access control vulnerability

An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call...

3.1CVSS0.00066EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/17 12:0 a.m.1 views

PT-2024-29789 · Hcl · Hcl Bigfix Inventory

Name of the Vulnerable Software and Affected Versions: HCL BigFix Inventory affected versions not specified Description: The issue is related to an improper handling of insufficient permissions or privileges in HCL BigFix Inventory. An attacker with access via a read-only account can possibly...

3.1CVSS6.9AI score0.00066EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/12/17 12:0 a.m.1 views

HCL BigFix Inventory 安全漏洞

HCL BigFix Inventory is a software inventory from HCL USA. Maintaining software audits reduces security risks through software compliance and utilization management. HCL BigFix Inventory has a security vulnerability that stems from insufficient permissions or improper handling of privileges. An...

3.1CVSS6.8AI score0.00066EPSS
Exploits0References1
NVD
NVD
added 2024/04/03 5:15 p.m.8 views

CVE-2024-23540

The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file...

5.3CVSS5.2AI score0.00384EPSS
Exploits0References1
Rows per page
Query Builder