Lucene search
+L

4365 matches found

CNNVD
CNNVD
•added 2024/11/07 12:00 a.m.•24 views

HCL BigFix Compliance 安全漏洞

HCL BigFix Compliance is a continuous monitoring and application of endpoint security settings by HCL Corporation of America to ensure compliance with regulatory or organizational security policies. A security vulnerability exists in HCL BigFix Compliance version v2.0.11, which originates from an...

5.4CVSS6.7AI score0.00237EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/07 12:00 a.m.•6 views

CVE-2024-30140: URL Redirection to Untrusted Site

HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result, it can poison the web cache and provide back to users being served the page...

5.4CVSS5.8AI score0.00237EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/07 12:00 a.m.•18 views

HCL BigFix Compliance 安全漏洞

HCL BigFix Compliance is a continuous monitoring and application of endpoint security settings by HCL USA to ensure compliance with regulatory or organizational security policies. A security vulnerability exists in HCL BigFix Compliance version v2.0.11, which stems from being affected by a missin...

3.8CVSS5.7AI score0.00104EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/07 12:00 a.m.•20 views

HCL Nomad 安全漏洞

HCL Nomad is an application for using and managing the Domino application development platform in mobile devices from HCL Corporation, USA. A security vulnerability exists in HCL Nomad that stems from vulnerability to arbitrary cross-namespace volume creation via unauthorized Container Storage...

7.7CVSS6.5AI score0.0045EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/31 9:15 a.m.•28 views

CVE-2024-30149

HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...

6.5CVSS0.0017EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/31 9:15 a.m.•18 views

CVE-2024-30149

HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...

6.5CVSS5.8AI score0.0017EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/31 8:25 a.m.•17 views

CVE-2024-30149 HCL AppScan Source is affected by an expired TLS/SSL certificate

HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...

4.8CVSS7AI score0.0017EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/31 8:25 a.m.•34 views

CVE-2024-30149 HCL AppScan Source is affected by an expired TLS/SSL certificate

HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...

4.8CVSS0.0017EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/31 8:25 a.m.•90 views

CVE-2024-30149

CVE-2024-30149 affects HCL AppScan Source versions 10.6.0 and earlier, with a root cause of improper validation of a TLS/SSL certificate for an executable. Public sources consistently state the issue in the AppScan Source

6.5CVSS5.2AI score0.0017EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/31 12:00 a.m.•7 views

CVE-2024-30149: Improper Certificate Validation

HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...

6.5CVSS5.7AI score0.0017EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/31 12:00 a.m.•20 views

HCL AppScan 安全漏洞

HCL AppScan is a suite of dynamic analysis testing tools from HCL Corporation, USA, which is primarily used for Web security testing. A security vulnerability exists in HCL AppScan version 10.6.0 and prior versions that stems from not properly validating the TLS/SSL certificate of an executable...

4.8CVSS6.7AI score0.0017EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/31 12:00 a.m.•20 views

PT-2024-23213 · Hcl · Hcl Appscan Source

Name of the Vulnerable Software and Affected Versions: HCL AppScan Source versions 10.6.0 and below Description: The issue is related to improper validation of a TLS/SSL certificate for an executable. This could potentially lead to security risks if exploited. Recommendations: For HCL AppScan...

4.8CVSS6.9AI score0.0017EPSS
SaveExploits0References5
OSV
OSV
•added 2024/10/28 10:15 p.m.•19 views

CVE-2024-30106

HCL Connections is vulnerable to an information disclosure vulnerability, due to an IBM WebSphere Application Server error, which could allow a user to obtain sensitive information they are not entitled to due to the improper handling of request data...

4.3CVSS5.8AI score0.00285EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/28 10:15 p.m.•44 views

CVE-2024-30106

HCL Connections is vulnerable to an information disclosure vulnerability, due to an IBM WebSphere Application Server error, which could allow a user to obtain sensitive information they are not entitled to due to the improper handling of request data...

4.3CVSS0.00285EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/28 9:35 p.m.•83 views

CVE-2024-30106

CVE-2024-30106 affects HCL Connections and is caused by an IBM WebSphere Application Server error that improperly handles request data, enabling information disclosure of sensitive information. The NVD entry lists a CVSS v3.1 base score of 4.3 (MEDIUM) with Network attack vector, low privileges r...

4.3CVSS3.7AI score0.00285EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/28 9:35 p.m.•12 views

CVE-2024-30106 HCL Connections is vulnerable to an information disclosure vulnerability

HCL Connections is vulnerable to an information disclosure vulnerability, due to an IBM WebSphere Application Server error, which could allow a user to obtain sensitive information they are not entitled to due to the improper handling of request data...

3.5CVSS6.1AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/28 9:35 p.m.•40 views

CVE-2024-30106 HCL Connections is vulnerable to an information disclosure vulnerability

HCL Connections is vulnerable to an information disclosure vulnerability, due to an IBM WebSphere Application Server error, which could allow a user to obtain sensitive information they are not entitled to due to the improper handling of request data...

3.5CVSS0.00285EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/28 12:00 a.m.•14 views

HCL Connections 安全漏洞

HCL Connections is a suite of enterprise collaboration platforms from HCL Corporation, USA. A security vulnerability exists in HCL Connections. An attacker exploiting the vulnerability could gain access to sensitive information...

4.3CVSS6.7AI score0.00285EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/28 12:00 a.m.•4 views

CVE-2024-30106: Exposure of Sensitive Information to an Unauthorized Actor

HCL Connections is vulnerable to an information disclosure vulnerability, due to an IBM WebSphere Application Server error, which could allow a user to obtain sensitive information they are not entitled to due to the improper handling of request data...

4.3CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/28 12:00 a.m.•19 views

PT-2024-23187 · Ibm +1 · Ibm Websphere Application Server +1

Name of the Vulnerable Software and Affected Versions: HCL Connections affected versions not specified Description: The issue is related to an information disclosure problem caused by an error in IBM WebSphere Application Server. This could allow unauthorized access to sensitive information due t...

4.3CVSS6.4AI score0.00285EPSS
SaveExploits0References5
Rows per page
Query Builder