Lucene search
+L

1942 matches found

Positive Technologies
Positive Technologies
•added 2022/11/28 12:00 a.m.•15 views

PT-2022-26436 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue allows a user with administrative privileges, including "Manage Security" permissions, to recover a credential previously saved for performing authenticated LDAP searches...

4.9CVSS4.9AI score0.0058EPSS
SaveExploits0References4
Citrix
Citrix
•added 2022/11/25 12:00 a.m.•17 views

CWA for Mac: How to disable Auto-Launch of CWA on MacOS

How to disable Auto-Launch of CWA on MacOS?...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2022/11/24 12:00 a.m.•69 views

MyBB MyCode Editor Cross-Site Scripting Vulnerability

MyBB MyBulletinBoard is a free and web-based forum software developed by MYBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. A cross-site scripting vulnerability exists in versions prior to mybb MyBB 1.8.32, which stems from a...

6.1CVSS6AI score0.00501EPSS
SaveExploits0References1
Citrix
Citrix
•added 2022/11/17 12:00 a.m.•15 views

Unable to Launch the Webex and Teams Meeting from Citrix Secure Web on Android

Unable to Launch the Webex or Teams Meeting from Citrix Secure Web on Android Error message "Blocked. Access to this site is restricted by admin policy" or blank page...

6.9AI score
SaveExploits0
NVD
NVD
•added 2022/10/31 10:15 p.m.•50 views

CVE-2021-27784

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

7.5CVSS0.0021EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/31 10:15 p.m.•34 views

Design/Logic Flaw

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

5CVSS7.5AI score0.0021EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/10/31 10:05 p.m.•58 views

CVE-2021-27784 HCL Launch container images may contain non-unique https certificates and database encryption key

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

5.9CVSS7.7AI score0.0021EPSS
SaveExploits0References1
CVE
CVE
•added 2022/10/31 10:05 p.m.•78 views

CVE-2021-27784

CVE-2021-27784 affects HCL Launch Container images, where non-unique HTTPS certificates and a database encryption key are included. The documented vulnerability is limited to the container images and does not affect standard installer packages. The available remediation is a fix that provides dir...

7.5CVSS6.5AI score0.0021EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/10/31 10:05 p.m.•15 views

CVE-2021-27784 HCL Launch container images may contain non-unique https certificates and database encryption key

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

5.9CVSS7.5AI score0.0021EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/31 12:00 a.m.•11 views

CVE-2021-27784: Use of a Broken or Risky Cryptographic Algorithm

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

7.5CVSS7.2AI score0.0021EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/10/31 12:00 a.m.•27 views

PT-2022-9869 · Hcl · Hcl Launch Container

Name of the Vulnerable Software and Affected Versions: HCL Launch Container images affected versions not specified Description: The issue concerns non-unique HTTPS certificates and a database encryption key in the provided HCL Launch Container images. A fix is available, which includes directions...

7.5CVSS7.4AI score0.0021EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/10/31 12:00 a.m.•21 views

HCL Technologies HCL Launch 加密问题漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A cryptographic issue vulnerability exists in the HCL Technologies HCL Launch Container that stems from th...

7.5CVSS7.3AI score0.0021EPSS
SaveExploits0References3
CNVD
CNVD
•added 2022/10/21 12:00 a.m.•87 views

Bento4 AP4_BitReader::SkipBits function denial of service vulnerability

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a boundary error in the AP4BitReader::SkipBitsunsigned int function in mp42ts when handling untrusted input. An attacker could exploit the vulnerabili...

6.5CVSS2.8AI score0.00709EPSS
SaveExploits1References1
Citrix
Citrix
•added 2022/10/14 12:00 a.m.•22 views

HTML5 app launch doesn't work via Netscaler after upgrading the CVAD setup

Upgrade Xendesktop from 7.15 Cu8 to 1912 CU5 or above Could connect externally through ADC Netscaler using HTML5 when on 7.15 but not with the latest codes Connecting to the machines using HTML5 via direct storefront works fine App launch via workspace app works fine though ADC as well Only while...

7.3AI score
SaveExploits0
Pen Test Partners Blog
Pen Test Partners Blog
•added 2022/10/13 5:48 a.m.•108 views

MS Enterprise app management service RCE. CVE-2022-35841

TL;DR A remote command execution and local privilege escalation vulnerability has been fixed by Microsoft as part of September’s patch Tuesday. The vulnerability, filed under CVE-2022-35841, affects the Enterprise App Management Service which handles the installation of enterprise applications...

0.1AI score0.03604EPSS
SaveExploits0
NVD
NVD
•added 2022/10/13 1:15 a.m.•57 views

CVE-2022-40187

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...

8CVSS0.00855EPSS
SaveExploits1References4
Prion
Prion
•added 2022/10/13 1:15 a.m.•37 views

Design/Logic Flaw

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...

5.2CVSS7.8AI score0.00855EPSS
SaveExploits1References4Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/13 12:00 a.m.•4 views

CVE-2022-40187: Incorrect Default Permissions

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...

8CVSS7.4AI score0.00855EPSS
SaveExploits1References3
CVE
CVE
•added 2022/10/13 12:00 a.m.•86 views

CVE-2022-40187

CVE-2022-40187 affects Foresight GC3 Launch Monitor 1.3.15.68, where the Target Communication Framework (TCF) service is enabled and listens on a TCP port on all interfaces. The service allows root-level actions including process debugging, file system modification, and terminal access. Combined ...

8CVSS7.7AI score0.00855EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2022/10/13 12:00 a.m.•42 views

CVE-2022-40187

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...

8AI score0.00855EPSS
SaveExploits1References4
Rows per page
Query Builder