Lucene search
+L

25 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2025-11092

Malicious code in bioql PyPI...

2.1CVSS6.6AI score0.0027EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2022-32046

Malicious code in bioql PyPI...

5.4CVSS6.3AI score0.00326EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-32045

Malicious code in bioql PyPI...

6.5CVSS6.9AI score0.00442EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/15 7:16 p.m.•18 views

CVE-2024-42193

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle MITM attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized acces...

8.1CVSS0.0027EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/15 6:16 p.m.•69 views

CVE-2024-42193

CVE-2024-42193 refers to a weakness in SSL certificate validation in the HCL BigFix Web Reports service. The connected Nessus entry (KB0120585) ties this to affected HCL BigFix Server versions: 10.0.x before 10.0.13 and 11.x before 11.0.4, indicating a MITM risk and potential unauthorized access ...

8.1CVSS6.3AI score0.0027EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/04/15 6:16 p.m.•34 views

CVE-2024-42193 HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle MITM attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized acces...

2.1CVSS0.0027EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/15 6:16 p.m.•15 views

CVE-2024-42193 HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle MITM attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized acces...

2.1CVSS6.3AI score0.0027EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/15 6:15 p.m.•12 views

CVE-2024-42200

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting XSS attack, due to a potentially weak validation of user input...

5.4CVSS5.8AI score0.0023EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/15 6:15 p.m.•26 views

CVE-2024-42189

HCL BigFix Web Reports might be subject to a Denial of Service DoS attack, due to a potentially weak validation of an API parameter...

6.5CVSS5.8AI score0.00296EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/15 6:07 p.m.•19 views

CVE-2024-42189 HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack

HCL BigFix Web Reports might be subject to a Denial of Service DoS attack, due to a potentially weak validation of an API parameter...

5.6CVSS6.5AI score0.00296EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/15 6:07 p.m.•59 views

CVE-2024-42189 HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack

HCL BigFix Web Reports might be subject to a Denial of Service DoS attack, due to a potentially weak validation of an API parameter...

5.6CVSS0.00296EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/15 6:00 p.m.•20 views

CVE-2024-42200 HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting XSS attack, due to a potentially weak validation of user input...

4.8CVSS5.5AI score0.0023EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/15 6:00 p.m.•34 views

CVE-2024-42200 HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting XSS attack, due to a potentially weak validation of user input...

4.8CVSS0.0023EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•1 views

CVE-2024-42200: Improper Neutralization of Input During Web Page Generation

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting XSS attack, due to a potentially weak validation of user input...

5.4CVSS5.7AI score0.0023EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•0 views

CVE-2024-42189: Improper Validation of Specified Type of Input

HCL BigFix Web Reports might be subject to a Denial of Service DoS attack, due to a potentially weak validation of an API parameter...

6.5CVSS5.8AI score0.00296EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•15 views

PT-2025-16376 · Hcl · Hcl Bigfix Web Reports

Name of the Vulnerable Software and Affected Versions: HCL BigFix Web Reports affected versions not specified Description: The issue is related to a potentially weak validation of user input, which might make HCL BigFix Web Reports subject to a Stored Cross-Site Scripting XSS attack...

4.8CVSS5.3AI score0.0023EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•18 views

PT-2025-16374 · Hcl · Hcl Bigfix Web Reports

Name of the Vulnerable Software and Affected Versions: HCL BigFix Web Reports affected versions not specified Description: The issue is related to a potentially weak validation of an API parameter, which might make HCL BigFix Web Reports subject to a Denial of Service DoS attack. Recommendations:...

5.6CVSS6AI score0.00296EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•0 views

CVE-2024-42193: Improper Certificate Validation

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle MITM attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized acces...

8.1CVSS5.8AI score0.0027EPSS
SaveExploits0References1
OSV
OSV
•added 2022/07/19 4:15 p.m.•13 views

CVE-2022-27544

BigFix Web Reports authorized users may see SMTP credentials in clear text...

6.5CVSS5.8AI score0.00442EPSS
SaveExploits0References1
OSV
OSV
•added 2022/07/19 4:15 p.m.•15 views

CVE-2022-27545

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

5.4CVSS5.8AI score0.00326EPSS
SaveExploits0References1
Rows per page
Query Builder