82 matches found
HCL AppScan Source <= 10.6 Improper Certificate Validation (CVE-2024-30149)
The version of HCL AppScan Source installed on the remote Windows host is 10.6.0 or earlier. It is, therefore, affected by an improper certificate validation vulnerability. HCL AppScan Source does not properly validate a TLS/SSL certificate for an executable, which could allow an attacker to...
EUVD-2019-7005
Malware in sbrugna...
EUVD-2019-13998
Malware in sbrugna...
EUVD-2019-13931
Malware in sbrugna...
EUVD-2019-13933
Malware in sbrugna...
EUVD-2019-13934
Malware in sbrugna...
EUVD-2019-13995
Malware in sbrugna...
EUVD-2019-13999
Malware in sbrugna...
EUVD-2019-14000
Malware in sbrugna...
EUVD-2019-13932
Malware in sbrugna...
EUVD-2024-28079
Malicious code in bioql PyPI...
EUVD-2023-41424
Malicious code in bioql PyPI...
EUVD-2024-28085
Malicious code in bioql PyPI...
CVE-2019-16188
HCL AppScan Source before 9.03.13 is susceptible to XML External Entity XXE attacks in multiple locations. In particular, an attacker can send a specially crafted .ozasmt file to a targeted victim and ask the victim to open it. When the victim imports the .ozasmt file in AppScan Source, the conte...
CVE-2019-4392
HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...
CVE-2019-4324
"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."...
CVE-2019-4325
"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."...
CVE-2019-4323
"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."...
CVE-2019-4393
HCL AppScan Standard is vulnerable to excessive authorization attempts...
CVE-2019-4327
"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...