Lucene search
+L

4364 matches found

Vulnrichment
Vulnrichment
•added 2024/06/25 3:08 p.m.•17 views

CVE-2023-37541 HCL Connections is vulnerable to broken access control

HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios...

3.5CVSS3.9AI score0.00329EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/25 3:08 p.m.•33 views

CVE-2023-37541 HCL Connections is vulnerable to broken access control

HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios...

3.5CVSS0.00329EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/25 12:00 a.m.•16 views

PT-2024-23192

Name of the Vulnerable Software and Affected Versions HCL Connections affected versions not specified Description The issue allows an attacker to execute arbitrary script code in the browser of an unsuspecting user through a cross-site scripting attack. This can lead to the execution of malicious...

5.4CVSS7.2AI score0.00256EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/25 12:00 a.m.•4 views

CVE-2023-37541: Undefined Security Weakness

HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios...

4.3CVSS5.8AI score0.00329EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/25 12:00 a.m.•4 views

CVE-2024-30112: Improper Neutralization of Input During Web Page Generation

HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may let the attacker steal cookie-based authentication credentials...

5.4CVSS6AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/14 10:15 p.m.•40 views

CVE-2024-30119

HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header. This could allow an attacker to intercept or manipulate data during redirection...

3.7CVSS0.00199EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/14 10:15 p.m.•38 views

CVE-2024-30120

HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application...

2.9CVSS0.00152EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/14 9:44 p.m.•19 views

CVE-2024-30120 HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application

HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application...

2.9CVSS6.9AI score0.00152EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/14 9:44 p.m.•38 views

CVE-2024-30120 HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application

HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application...

2.9CVSS0.00152EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/14 9:44 p.m.•69 views

CVE-2024-30120

CVE-2024-30120 affects HCL DRYiCE Optibot Reset Station. The vulnerability is described as an Unused Parameter in the web application. The only concrete technical detail provided is the CVSS v3.1 metrics: AV:L, AC:H, PR:N, UI:N, S:U, C:L, I:N, A:N, with a base score of 2.9 (LOW). Exploitation is ...

2.9CVSS3.9AI score0.00152EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/14 9:34 p.m.•58 views

CVE-2024-30119

CVE-2024-30119 affects HCL DRYiCE Optibot Reset Station due to a missing Strict Transport Security (HSTS) header. Underlying issue allows potential interception or manipulation of data during redirection. CVSSv3.1/3.1 metrics indicate a base score of 3.7 (LOW) with Network attack vector, high att...

3.7CVSS4.1AI score0.00199EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/14 9:34 p.m.•15 views

CVE-2024-30119 HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header

HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header. This could allow an attacker to intercept or manipulate data during redirection...

3.7CVSS6.8AI score0.00199EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/14 9:34 p.m.•46 views

CVE-2024-30119 HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header

HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header. This could allow an attacker to intercept or manipulate data during redirection...

3.7CVSS0.00199EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/14 12:00 a.m.•4 views

PT-2024-23196

Name of the Vulnerable Software and Affected Versions HCL DRYiCE Optibot Reset Station affected versions not specified Description The issue is related to an unused parameter in the web application of HCL DRYiCE Optibot Reset Station. Recommendations At the moment, there is no information about a...

2.9CVSS0.00152EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/06/14 12:00 a.m.•15 views

HCL Technologies DRYiCE Optibot Reset Station Security Vulnerability

HCL Technologies DRYiCE Optibot Reset Station is an application from HCL Technologies, USA. A security vulnerability exists in HCL Technologies DRYiCE Optibot Reset Station that stems from the lack of a Strict Transport Security header. An attacker exploiting this vulnerability could intercept or...

3.7CVSS6.7AI score0.00199EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/06/14 12:00 a.m.•4 views

PT-2024-23195

Name of the Vulnerable Software and Affected Versions HCL DRYiCE Optibot Reset Station affected versions not specified Description The issue is related to a missing Strict Transport Security Header, which could allow an attacker to intercept or manipulate data during redirection. This affects the...

3.7CVSS0.00199EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/14 12:00 a.m.•4 views

CVE-2024-30120: Assignment to Variable without Use

HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application...

2.9CVSS5.8AI score0.00152EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/14 12:00 a.m.•5 views

CVE-2024-30119: Insufficiently Protected Credentials

HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header. This could allow an attacker to intercept or manipulate data during redirection...

3.7CVSS5.8AI score0.00199EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/14 12:00 a.m.•18 views

HCL Technologies DRYiCE Optibot Reset Station Security Vulnerability

HCL Technologies DRYiCE Optibot Reset Station is an application from HCL Technologies, USA. A security vulnerability exists in HCL Technologies DRYiCE Optibot Reset Station that stems from vulnerability to unused parameters in a web application...

2.9CVSS6.8AI score0.00152EPSS
SaveExploits0References2
NVD
NVD
•added 2024/06/08 3:15 p.m.•26 views

CVE-2023-45707

HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks...

4.4CVSS0.0025EPSS
SaveExploits0References1
Rows per page
Query Builder