5364 matches found
HCL Domino Volt和HCL Domino Leap 安全漏洞
HCL Domino Volt and HCL Domino Leap are both products of HCL India.HCL Domino Volt is a low-code application development solution based on the Domino platform.HCL Domino Leap is a cloud-based collaboration platform that modernizes traditional Domino applications. A security vulnerability exists i...
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from an inadequate cleanup policy that could lead to client-side script injection...
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. A security vulnerability exists in HCL Leap, which stems from an inadequate default configuration that could lead to anonymous access to directory information...
PT-2025-18336
Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description An insufficient sanitization policy in HCL Leap allows client-side script injection in deployed applications through the HTML widget. This allows for the execution of malicious scripts withi...
CVE-2024-30145: Improper Neutralization of Input During Web Page Generation
Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications...
CVE-2024-30146: Improper Access Control
Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem...
HCL Domino Volt和HCL Domino Leap 安全漏洞
HCL Domino Volt and HCL Domino Leap are both products of HCL India.HCL Domino Volt is a low-code application development solution based on the Domino platform.HCL Domino Leap is a cloud-based collaboration platform that modernizes traditional Domino applications. HCL Domino Volt and HCL Domino Le...
CVE-2024-30115: Improper Neutralization of Input During Web Page Generation
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget...
PT-2025-18337 · Hcl · Domino Leap +1
Name of the Vulnerable Software and Affected Versions: HCL Domino Volt and Domino Leap affected versions not specified Description: The issue allows client-side script injection in the authoring environment and deployed applications. This can be achieved through multiple vectors in HCL Domino Vol...
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from the lack of a no cache header, which could lead to caching of sensitive data...
PT-2025-18333 · Hcl · Hcl Leap
Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue concerns missing "no cache" headers in HCL Leap, which allows sensitive data to be cached. This could potentially expose confidential information. Recommendations: At the moment,...
CVE-2023-45721: Exposure of Private Personal Information to an Unauthorized Actor
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
CVE-2023-37535: Improper Neutralization of Input During Web Page Generation
Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters...
CVE-2023-37517: Use of Cache Containing Sensitive Information
Missing "no cache" headers in HCL Leap permits sensitive data to be cached...
openSUSE Security Advisory (SUSE-SU-2025:1365-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-37516
Missing "no cache" headers in HCL Leap permits user directory information to be cached...
CVE-2022-44759
Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications...
CVE-2022-44760
Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications...