4365 matches found
PT-2025-41538
Name of the Vulnerable Software and Affected Versions HCL AION version 2.0 Description The software contains a missing secure attribute in encrypted session cookies. This could allow attackers to potentially intercept sensitive information transmitted in the session. Recommendations At the moment...
CVE-2025-52634: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0...
HCL AION 安全漏洞
HCL AION is an AI lifecycle management platform from HCL India. HCL AION suffers from a security vulnerability that stems from a script whitelist configuration bypass and a misconfigured Content-Security-Policy header, which can be exploited by an attacker to cause cross-site scripting and other...
PT-2025-41546
Name of the Vulnerable Software and Affected Versions HCL AION version 2.0 Description A flaw exists in HCL AION where types in scripts are not enforced by the Content Security Policy CSP. This can potentially lead to security issues. Recommendations At the moment, there is no information about a...
HCL AION 安全漏洞
HCL AION is an AI lifecycle management platform from HCL India. A security vulnerability exists in HCL AION version v2.0 that stems from allowing inline script execution in CSP environments...
CVE-2025-52650: Undefined Security Weakness
Inline script execution allowed in CSP vulnerability has been identified in HCL AION v2.0...
PT-2025-41539
Name of the Vulnerable Software and Affected Versions HCL AION version 2.0 Description A flaw exists in HCL AION that can lead to the exposure of sensitive information to an unauthorized actor. Recommendations At the moment, there is no information about a newer version that contains a fix for th...
CVE-2025-52655: Inclusion of Functionality from Untrusted Control Sphere
Inclusion of Functionality from Untrusted Control Sphere vulnerability in HCL MyXalytics. v6.6 allows Loading third-party scripts without integrity checks or validation can allow external code run in the application's context, risking data exposure...
CVE-2025-52632: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
A Missing Secure Attribute in Encrypted Session SSL Cookie vulnerability in HCL AION.This issue affects AION: 2.0...
HCL AION 安全漏洞
HCL AION is an AI lifecycle management platform from HCL India. HCL AION suffers from an information disclosure vulnerability due to a missing or insecure "X-Content-Type-Options" header flaw. An attacker could exploit this vulnerability to obtain credentials or system information...
CVE-2025-52625: Use of Web Browser Cache Containing Sensitive Information
A vulnerability Cacheable SSL Page Found vulnerability has been identified in HCL AION. Cached data may expose credentials, system identifiers, or internal file paths to attackers with access to the device or browser This issue affects AION: 2.0...
CVE-2025-52630: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION.This issue affects AION: 2.0...
CVE-2025-52656
HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields...
CVE-2025-52658
HCL MyXalytics 6.6. product is affected by Use of Vulnerable/Outdated Versions Vulnerability...
EUVD-2019-13995
Malware in sbrugna...
EUVD-2020-6375
Malware in sbrugna...
EUVD-2020-6376
Malware in sbrugna...
EUVD-2020-25372
Malware in sbrugna...