Lucene search
+L

4219 matches found

CNVD
CNVD
•added 2020/12/22 12:00 a.m.•21 views

Unspecified Vulnerability in HCL BigFix Inventory

HCL BigFix Platform is a suite of endpoint security management platform from HCL India. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Inventory v10.0.2 onwards, which stems from not disabling the...

7.5CVSS6.6AI score0.00647EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/22 12:00 a.m.•7 views

CVE-2020-14270: Improper Handling of Exceptional Conditions

HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user input. An unauthenticated attacker could exploit this vulnerability to obtain information about the XPages software running on the Domino server...

5.3CVSS5.8AI score0.009EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/12/22 12:00 a.m.•19 views

HCL iNotes Tag Phishing Vulnerability

HCL iNotes is a browsing client for accessing HCLDomino mail, contacts, calendar, scheduling and collaboration features. A label phishing vulnerability exists in HCL iNotes. The vulnerability stems from improper validation of email content. A remote, unauthenticated attacker could exploit the...

6.5CVSS6.7AI score0.01266EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/21 6:15 p.m.•27 views

CVE-2020-14225

HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick the end user into entering sensitive information such as credentials, e.g. as part of a phishing attack...

6.5CVSS6.4AI score0.01266EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/21 6:15 p.m.•29 views

Spoofing

HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick the end user into entering sensitive information such as credentials, e.g. as part of a phishing attack...

4.3CVSS6.3AI score0.01266EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/12/21 5:09 p.m.•36 views

CVE-2020-14225

HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick the end user into entering sensitive information such as credentials, e.g. as part of a phishing attack...

6.4AI score0.01266EPSS
SaveExploits0References1
CVE
CVE
•added 2020/12/21 5:09 p.m.•65 views

CVE-2020-14225

CVE-2020-14225 affects HCL iNotes (HCL Domino mail) and is a Tabnabbing vulnerability caused by improper sanitization of message content. The vulnerability enables a remote, unauthenticated attacker to prompt users to enter credentials via phishing-like tricks. Per CVSS data, the attack is networ...

6.5CVSS6.3AI score0.01266EPSS
SaveExploits0References1Affected Software2
CNVD
CNVD
•added 2020/12/21 12:00 a.m.•18 views

HCL iNotes Cross-Site Scripting Vulnerability

HCL iNotes is a browsing client for accessing HCLDomino mail, contacts, calendar, scheduling and collaboration features. A stored cross-site scripting vulnerability exists in HCL iNotes 9, 10, and 11. The vulnerability stems from improper handling of message content. An attacker can exploit this...

6.1CVSS6.5AI score0.0111EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/21 12:00 a.m.•3 views

CVE-2020-14225: Undefined Security Weakness

HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick the end user into entering sensitive information such as credentials, e.g. as part of a phishing attack...

6.5CVSS5.9AI score0.01266EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/12/21 12:00 a.m.•19 views

HCL Notes Authorization Issues Vulnerability

HCL Notes is a highly secure local email client from HCL India. HCL Notes v9 client has an authorization issue vulnerability that stems from A vulnerability in MIME message handling could be exploited by an unauthenticated attacker to cause a stack buffer overflow. A remote attacker could use thi...

10CVSS7.3AI score0.02253EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2020/12/21 12:00 a.m.•17 views

Hcl Technologies Inotes 安全漏洞

HCL iNotes is a browsing client for accessing HCLDomino mail, contacts, calendar, scheduling and collaboration features. A label phishing vulnerability exists in HCL iNotes. The vulnerability stems from improper validation of email content. A remote, unauthenticated attacker could exploit the...

6.5CVSS6.6AI score0.01266EPSS
SaveExploits0References3
OSV
OSV
•added 2020/12/18 11:15 p.m.•13 views

CVE-2020-14271

HCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting XSS vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the...

6.1CVSS6.3AI score0.0111EPSS
SaveExploits0References1
OSV
OSV
•added 2020/12/18 11:15 p.m.•15 views

CVE-2020-14224

A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the Notes application or inject code into the system which would execute with the...

9.8CVSS7.7AI score0.02253EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/18 11:15 p.m.•40 views

CVE-2020-14224

A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the Notes application or inject code into the system which would execute with the...

10CVSS9.7AI score0.02253EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/18 11:15 p.m.•31 views

CVE-2020-14271

HCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting XSS vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the...

6.1CVSS6.1AI score0.0111EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/18 11:15 p.m.•30 views

Stack overflow

A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the Notes application or inject code into the system which would execute with the...

10CVSS9.6AI score0.02253EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2020/12/18 11:15 p.m.•29 views

Cross site scripting

HCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting XSS vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the...

4.3CVSS6.1AI score0.0111EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2020/12/18 10:15 p.m.•40 views

CVE-2020-4080

HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting XSS vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the security...

6.1CVSS6.1AI score0.00855EPSS
SaveExploits0References1
OSV
OSV
•added 2020/12/18 10:15 p.m.•15 views

CVE-2020-4080

HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting XSS vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the security...

6.1CVSS6.3AI score0.00855EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/18 10:15 p.m.•32 views

Cross site scripting

HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting XSS vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the security...

4.3CVSS6.1AI score0.00855EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder