Lucene search
+L

2408 matches found

Vulnrichment
Vulnrichment
added 2024/02/03 5:32 a.m.11 views

CVE-2024-23550 HCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosure

HCL DevOps Deploy / HCL Launch UCD could disclose sensitive user information when installing the Windows agent...

6.2CVSS6.5AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/03 5:32 a.m.66 views

CVE-2024-23550

CVE-2024-23550 affects HCL DevOps Deploy / HCL Launch (UCD). The Windows agent installer could disclose sensitive user information, with confidentiality impact described as High in the CVSS data. The provided documents do not specify the underlying root cause details or a fixed version. Public so...

6.2CVSS5.3AI score0.00214EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2024/02/03 5:32 a.m.36 views

CVE-2024-23550 HCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosure

HCL DevOps Deploy / HCL Launch UCD could disclose sensitive user information when installing the Windows agent...

6.2CVSS6.4AI score0.00214EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/03 12:0 a.m.8 views

HCL Technologies HCL Launch Security Breach

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch UCD that stems from the ability to...

6.2CVSS6.5AI score0.00214EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/01/25 12:0 a.m.6 views

Octopus Cross-Site Scripting Vulnerability

Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. A cross-site scripting vulnerability exists in Octopus version 1.0, which stems from the fact that passing the parameter description can lead to cross-site scripting...

5.4CVSS6AI score0.00562EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/01/25 12:0 a.m.6 views

Octopus SQL Injection Vulnerability

Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. An SQL injection vulnerability exists in Octopus version 1.0, which stems from the parameter ancestors in the file /system/dept/edit that can lead to SQL injection...

9.8CVSS8AI score0.00657EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/01/22 12:0 a.m.7 views

Octopus Deploy SQL Injection Vulnerability

Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. A SQL injection vulnerability exists in Octopus Deploy version 1.0, which stems from /system/role/list containing unknown functions that cause SQL injection via the...

9.8CVSS8.1AI score0.0068EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2024/01/03 12:0 a.m.28 views

GitLab 12.10 < 15.1.6 / 15.2 < 15.2.4 / 15.3 < 15.3.2 (CVE-2022-2533)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 12.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab wa...

7.4CVSS7.2AI score0.00688EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/01/03 12:0 a.m.28 views

GitLab 10.7 < 14.3.6 / 14.4 < 14.4.4 / 14.5 < 14.5.2 (CVE-2021-39936)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper access control in GitLab CE/EE affecting all versions starting from 10.7 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an...

4.3CVSS5.2AI score0.01025EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/01/02 12:0 a.m.27 views

GitLab 12.0.0 < 14.9.5 / 14.10.0 < 14.10.4 / 15.0.0 < 15.0.1 (CVE-2022-1936)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1 allowed an attacker...

6.5CVSS6.5AI score0.00664EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/01/02 12:0 a.m.26 views

GitLab 8.15 < 14.3.6 / 14.4 < 14.4.4 / 14.5 < 14.5.2 (CVE-2021-39938)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attack...

6.5CVSS6.5AI score0.00892EPSS
SaveExploits0References3
NVD
NVD
added 2023/12/28 8:15 a.m.23 views

CVE-2023-45702

An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts...

6.2CVSS0.00162EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/28 8:15 a.m.6 views

CVE-2023-45702

An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/28 8:15 a.m.15 views

Code injection

An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts...

1.7CVSS6.8AI score0.00162EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/28 7:29 a.m.46 views

CVE-2023-45702

CVE-2023-45702 affects the HCL UrbanCode Deploy Agent when installed as a Windows service in a non-standard location. The documented impact is a local-accounts–based denial of service, with exploitation attempted locally and no user interaction required. The available sources describe the vulnera...

6.2CVSS5.5AI score0.00162EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/28 7:29 a.m.27 views

CVE-2023-45702 HCL Launch Agent as a Windows service is vulnerable to a Denial of Service

An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts...

6.2CVSS6.3AI score0.00162EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/28 12:0 a.m.7 views

PT-2023-29655 · Hcl · Hcl Urbancode Deploy Agent

Name of the Vulnerable Software and Affected Versions: HCL UrbanCode Deploy Agent affected versions not specified Description: The issue concerns a denial of service attack that can be launched by local accounts against an HCL UrbanCode Deploy Agent installed as a Windows service in a non-standar...

6.2CVSS5.4AI score0.00162EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/12/28 12:0 a.m.6 views

HCL Launch Security Breach

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL Launch versions 7.2 through 7.2.3.7 and 7.3 through 7.3.2.2, which...

6.2CVSS6.8AI score0.00162EPSS
SaveExploits0References2
Citrix
Citrix
added 2023/12/28 12:0 a.m.10 views

The new feature "Use existing identity pools to create identities for MCS-provisioned machines"

For quick deploy, it should be 1 to 1 mapping for identity pool to MCS catalog...

7.1AI score
SaveExploits0
Veracode
Veracode
added 2023/12/26 5:44 a.m.13 views

Improper Authorization

gitlab is vulnerable to Improper Authorization. It is possible for a removed project member to write to protected branches by using deploy keys...

4.3CVSS6.8AI score0.00425EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder