CVE-2025-0257 HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service...

HCL Launch和HCL DevOps Deploy 访问控制错误漏洞

HCL Launch and HCL DevOps Deploy are both products of HCL India.HCL Launch is a multi-functional, enterprise-grade continuous delivery automation software. Used to handle the most complex deployment processes in DevOps.HCL DevOps Deploy is an application. Can be mapped to your organizational...

CVE-2025-0257: Missing Authentication for Critical Function

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service...

PT-2025-55366

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.4 Description An application may bypass launch constraint protections, allowing the execution of malicious code with elevated privileges. Recommendations Update to macOS Sequoia 15.4...

Apple macOS 访问控制错误漏洞

Apple macOS is a suite of specialized operating systems from the U.S. company Apple Apple developed specifically for Mac computers. A security vulnerability exists in Apple macOS Sequoia, which stems from the possibility that applications that appear to use App Sandbox may launch without...

CVE-2025-0273

HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user...

CVE-2025-0273 HCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability

HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user...

CVE-2025-0273: Insertion of Sensitive Information into Log File

HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user...

HCL Launch和HCL DevOps Deploy 日志信息泄露漏洞

HCL Launch and HCL DevOps Deploy are both products of HCL India.HCL Launch is a multi-functional, enterprise-grade continuous delivery automation software. Used to handle the most complex deployment processes in DevOps.HCL DevOps Deploy is an application. Can be mapped to your organizational...

Security update for tomcat10

This update for tomcat10 fixes the following issues: CVE-2025-24813: Fixed potential RCE and/or information disclosure/corruption with partial PUT bsc1239302 Other fixes: Update to Tomcat 10.1.39 Fixes: launch with java 17 bsc1239676 Catalina Fix: 69602: Fix regression in releases from 12-2024 th...

CVE-2025-25374

The NASA cFS (Core Flight System) Aquila is vulnerable to an uncontrolled resource consumption issue (CWE-400) that can put the onboard software into a state preventing the launch of any external application. This results in a platform denial of service . While the specific affected versions are ...

CVE-2025-0255

HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements...

CVE-2025-0255 HCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerability

HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements...

CVE-2025-0256 HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure

HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function...

CVE-2025-0256 HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure

HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function...

HCL Launch和HCL DevOps Deploy 安全漏洞

HCL Launch and HCL DevOps Deploy are both products of HCL India.HCL Launch is a multi-functional, enterprise-grade continuous delivery automation software. Used to handle the most complex deployment processes in DevOps.HCL DevOps Deploy is an application. Can be mapped to your organizational...

PT-2025-12663

Name of the Vulnerable Software and Affected Versions HCL DevOps Deploy / HCL Launch affected versions not specified Description The issue allows a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements...

HCL Launch和HCL DevOps Deploy 安全漏洞

HCL Launch and HCL DevOps Deploy are both products of HCL India.HCL Launch is a multi-functional, enterprise-grade continuous delivery automation software. Used to handle the most complex deployment processes in DevOps.HCL DevOps Deploy is an application. Can be mapped to your organizational...

CVE-2025-0255: Improper Neutralization of Special Elements used in an OS Command

HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements...

CVE-2025-0256: Missing Authentication for Critical Function

HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function...