418 matches found
EUVD-2026-66805
HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...
EUVD-2026-66806
HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...
EUVD-2026-66757
HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...
EUVD-2026-66775
HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...
CVE-2026-21807
HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...
CVE-2026-21808
HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...
CVE-2026-21809
HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...
CVE-2026-21808
HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default, which can expose sensitive data and reveal internal application logic and architectural details to an attacker. The flaw is scored CVSS 4.1 (MEDIUM) , requiring a local attack with high complexity and high ...
CVE-2026-21808 HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information
HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...
CVE-2026-21807
HCL BigFix Quantum Risk Analyzer is affected by a vulnerability in its binary, which lacks several critical, industry-standard hardening protections. This absence could allow an attacker to cause a stack-based buffer overflow , potentially leading to crashes or arbitrary code execution. Affected ...
CVE-2026-21807 HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow
HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...
CVE-2026-21810
HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity checking , which could allow an attacker to obtain sensitive information or modify the binary. The CVSS v3.1 base score is 4.4 (Medium) , with a local attack vector and high priv...
CVE-2026-21810 HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checking
HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...
PT-2026-82330
Name of the Vulnerable Software and Affected Versions HCL BigFix Quantum Risk Analyzer affected versions not specified Description The software generates highly detailed logging information by default. This behavior increases the risk of sensitive data leakage and may allow an attacker to gain...
PT-2026-82329
Name of the Vulnerable Software and Affected Versions HCL BigFix Quantum Risk Analyzer affected versions not specified Description The binary lacks several critical, industry-standard hardening protections, which could allow an attacker to cause a stack-based buffer overflow. A stack-based buffer...
CVE-2026-56619
HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting Reflected XSS due to insufficient validation and output encoding of user-controlled input...
CVE-2026-56620
HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting...
EUVD-2026-55668
HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting Reflected XSS due to insufficient validation and output encoding of user-controlled input...
CVE-2026-56619
CVE-2026-56619 affects HCL BigFix Mobile. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability caused by insufficient validation and output encoding of user-controlled input. The CVSS v3.1 base score is 5.4 (Medium) with Network attack, Low attack complexity, Privileges Required: Low...