Lucene search
+L

1606 matches found

OSV
OSV
added 2024/04/15 9:15 p.m.6 views

CVE-2024-23558

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

6.3CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/15 9:0 p.m.11 views

CVE-2024-23558 HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

6.3CVSS6.7AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/15 9:0 p.m.30 views

CVE-2024-23558 HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

6.3CVSS6.5AI score0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/15 8:20 p.m.11 views

CVE-2024-23561 HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability

HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values...

4.3CVSS6.4AI score0.0036EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/15 8:20 p.m.23 views

CVE-2024-23561 HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability

HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values...

4.3CVSS4.7AI score0.0036EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/15 8:15 p.m.7 views

CVE-2024-23560

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type...

4.9CVSS5.8AI score0.00324EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/15 7:22 p.m.57 views

CVE-2024-23560

The CVE-2024-23560 issue affects HCL DevOps Deploy / HCL Launch, arising from incomplete revocation of permissions when deleting a custom security resource type. Public details indicate potential integrity impact (I=HIGH) with no confidentiality/availability impact; CVSS base scores are MEDIUM. N...

4.9CVSS6.8AI score0.00324EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2024/04/15 7:22 p.m.13 views

CVE-2024-23560 HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type...

4.4CVSS7AI score0.00324EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/15 7:22 p.m.27 views

CVE-2024-23560 HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type...

4.4CVSS5.1AI score0.00324EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/15 6:15 p.m.6 views

CVE-2024-23559

HCL DevOps Deploy / Launch is generating an obsolete HTTP header...

6.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/15 5:31 p.m.39 views

CVE-2024-23559 HCL DevOps Deploy / Launch is generating an obsolete HTTP header

HCL DevOps Deploy / Launch is generating an obsolete HTTP header...

6.1CVSS6.5AI score0.00308EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/15 12:0 a.m.7 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL Technologies HCL DevOps Deploy and HCL Launch that stems from...

4.3CVSS6.8AI score0.0036EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/15 12:0 a.m.7 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch that stems from not invalidati...

6.3CVSS6.7AI score0.00308EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/15 12:0 a.m.5 views

PT-2024-19942 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue is related to a sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values. Recommendations: At the moment, there is...

4.3CVSS6.6AI score0.0036EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/04/15 12:0 a.m.5 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch that stems from the...

4.9CVSS6.7AI score0.00324EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/15 12:0 a.m.6 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch that stems from allowing the...

6.1CVSS6.7AI score0.00308EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/15 12:0 a.m.6 views

PT-2024-19939 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue arises from the failure of HCL DevOps Deploy / HCL Launch to invalidate a user's session after they log out. This could potentially allow an authenticated...

6.3CVSS6.7AI score0.00308EPSS
SaveExploits0References8
Redos
Redos
added 2024/04/10 12:0 a.m.33 views

ROS-20240410-18

The vulnerability of Runc's isolated container launch tool is related to a flaw in the delimitations of the controlled area of the system. Exploitation of the vulnerability could allow an attacker to execute arbitrary code outside the isolated program environment by overwriting executable files...

8.6CVSS7.2AI score0.18087EPSS
SaveExploits18
Microsoft KB
Microsoft KB
added 2024/04/09 7:0 a.m.120 views

April 9, 2024—KB5036910 (OS Build 25398.830)

None None...

8.8CVSS6.8AI score0.87896EPSS
SaveExploits7
NVD
NVD
added 2024/04/09 1:15 a.m.32 views

CVE-2024-25646

Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application...

7.7CVSS7.3AI score0.0042EPSS
SaveExploits0References2
Rows per page
Query Builder