Lucene search
+L

1942 matches found

OSV
OSV
•added 2024/04/15 6:15 p.m.•18 views

CVE-2024-23559

HCL DevOps Deploy / Launch is generating an obsolete HTTP header...

6.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/15 5:31 p.m.•53 views

CVE-2024-23559 HCL DevOps Deploy / Launch is generating an obsolete HTTP header

HCL DevOps Deploy / Launch is generating an obsolete HTTP header...

6.1CVSS6.5AI score0.00308EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•17 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch that stems from the...

4.9CVSS6.7AI score0.00324EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•19 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL Technologies HCL DevOps Deploy and HCL Launch that stems from...

4.3CVSS6.8AI score0.0036EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•18 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch that stems from allowing the...

6.1CVSS6.7AI score0.00308EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•6 views

CVE-2024-23561: Insecure Storage of Sensitive Information

HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values...

4.3CVSS5.8AI score0.0036EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•4 views

CVE-2024-23559: Undefined Security Weakness

HCL DevOps Deploy / Launch is generating an obsolete HTTP header...

6.1CVSS5.7AI score0.00308EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•9 views

CVE-2024-23558: Authentication Bypass by Spoofing

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

6.3CVSS5.8AI score0.00308EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•20 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch that stems from not invalidati...

6.3CVSS6.7AI score0.00308EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/15 12:00 a.m.•14 views

PT-2024-19942 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue is related to a sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values. Recommendations: At the moment, there is...

4.3CVSS6.6AI score0.0036EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/04/15 12:00 a.m.•21 views

PT-2024-19939 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue arises from the failure of HCL DevOps Deploy / HCL Launch to invalidate a user's session after they log out. This could potentially allow an authenticated...

6.3CVSS6.7AI score0.00308EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•7 views

CVE-2024-23560: Improper Preservation of Permissions

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type...

4.9CVSS5.7AI score0.00324EPSS
SaveExploits0References2
Redos
Redos
•added 2024/04/10 12:00 a.m.•46 views

ROS-20240410-18

The vulnerability of Runc's isolated container launch tool is related to a flaw in the delimitations of the controlled area of the system. Exploitation of the vulnerability could allow an attacker to execute arbitrary code outside the isolated program environment by overwriting executable files...

8.6CVSS6.9AI score0.18923EPSS
SaveExploits19
Microsoft KB
Microsoft KB
•added 2024/04/09 7:00 a.m.•136 views

April 9, 2024—KB5036910 (OS Build 25398.830)

None None...

8.8CVSS6.8AI score0.87896EPSS
SaveExploits8
OSV
OSV
•added 2024/04/09 1:15 a.m.•21 views

CVE-2024-25646

Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application...

6.5CVSS5.8AI score0.0042EPSS
SaveExploits0References2
NVD
NVD
•added 2024/04/09 1:15 a.m.•41 views

CVE-2024-25646

Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application...

7.7CVSS7.3AI score0.0042EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•19 views

SAP BusinessObject Business Intelligence Launch Pad 信息泄露漏洞

SAP BusinessObject Business Intelligence Launch Pad is a web control panel for the Business Intelligence platform from SAP, Germany. An information disclosure vulnerability exists in SAP BusinessObject Business Intelligence Launch Pad versions 4.2 and 4.3, which arises from improper authenticatio...

7.7CVSS6AI score0.0042EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/09 12:00 a.m.•8 views

CVE-2024-25646: Incorrect Permission Assignment for Critical Resource

Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application...

7.7CVSS5.8AI score0.0042EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/08 12:00 a.m.•25 views

PT-2024-2972

Name of the Vulnerable Software and Affected Versions SAP BusinessObject Business Intelligence Launch Pad affected versions not specified Description The issue is related to improper validation in SAP BusinessObject Business Intelligence Launch Pad, allowing an authenticated attacker to access...

7.7CVSS7.1AI score0.0042EPSS
SaveExploits0References10
OSV
OSV
•added 2024/04/02 3:15 a.m.•17 views

CVE-2024-20851

Improper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows local attackers to launch arbitrary activity with Samsung Data Store privilege...

5.5CVSS5.9AI score0.00135EPSS
SaveExploits0References1
Rows per page
Query Builder