Lucene search
+L

211 matches found

OSV
OSV
added 2023/06/22 11:15 p.m.8 views

CVE-2023-28006

The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure...

7.8CVSS5.8AI score0.00108EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/22 11:15 p.m.32 views

CVE-2023-28006

The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure...

7.8CVSS7.1AI score0.00108EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/22 11:15 p.m.8 views

CVE-2023-28016

Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain...

6.1CVSS6.4AI score0.00305EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/22 11:15 p.m.18 views

CVE-2023-28016

Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain...

6.1CVSS4.8AI score0.00305EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/22 11:15 p.m.25 views

Design/Logic Flaw

Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain...

5.8CVSS6.4AI score0.00305EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/06/22 10:18 p.m.27 views

CVE-2023-28016 HCL BigFix OSD Bare Metal Server is affected by a host header injection vulnerability

Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain...

3.1CVSS6.6AI score0.00305EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/06/22 10:18 p.m.13 views

CVE-2023-28016 HCL BigFix OSD Bare Metal Server is affected by a host header injection vulnerability

Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain...

3.1CVSS7.1AI score0.00305EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/22 10:18 p.m.61 views

CVE-2023-28016

CVE-2023-28016 affects HCL BigFix OSD Bare Metal Server versions 311.12 or lower, via a Host Header Injection vulnerability that enables a redirect to an attacker‑controlled domain. Root cause is improper handling of host header input leading to external redirects. Impact is a user redirection to...

6.1CVSS4.8AI score0.00305EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/06/22 10:15 p.m.10 views

CVE-2023-23343

A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page to perform a redirect to an attacker-controlled domain...

6.1CVSS5.8AI score0.00318EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/06/22 10:07 p.m.13 views

CVE-2023-28006 HCL BigFix OSD Bare Metal Server is affected by a weak cryptographic algorithm.

The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure...

7CVSS6.9AI score0.00108EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/22 10:07 p.m.58 views

CVE-2023-28006

CVE-2023-28006 affects the OSD Bare Metal Server (HCL BigFix OSD). The vulnerability stems from using a cryptographic algorithm that is no longer considered sufficiently secure. Documents indicate the issue concerns cryptographic strength with high impact across confidentiality, integrity, and av...

7.8CVSS7.1AI score0.00108EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/06/22 10:07 p.m.36 views

CVE-2023-28006 HCL BigFix OSD Bare Metal Server is affected by a weak cryptographic algorithm.

The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure...

7CVSS7.8AI score0.00108EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/06/22 9:57 p.m.18 views

CVE-2023-23343 HCL BigFix OSD Bare Metal Server version 311.12 or lower is affected by a clickjacking vulnerability.

A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page to perform a redirect to an attacker-controlled domain...

2.4CVSS6.8AI score0.00318EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/22 9:57 p.m.59 views

CVE-2023-23343

CVE-2023-23343 describes a clickjacking flaw in HCL BigFix OSD Bare Metal Server, affected versions up to 311.12. Adversaries can stack transparent/opaque layers to trick users into clicking a link/button that redirects to an attacker-controlled domain. Documented impact is redirect-based clickja...

6.1CVSS4.4AI score0.00318EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/06/22 9:57 p.m.31 views

CVE-2023-23343 HCL BigFix OSD Bare Metal Server version 311.12 or lower is affected by a clickjacking vulnerability.

A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page to perform a redirect to an attacker-controlled domain...

2.4CVSS6.4AI score0.00318EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/06/22 12:00 a.m.10 views

HCL Technologies BigFix OSD 安全漏洞

HCL Technologies BigFix OSD is part of a lifecycle management software from HCL Technologies, Inc. It is used for the deployment of operating systems. A security vulnerability exists in HCL BigFix OSD Bare Metal Server version 311.12 and earlier. An attacker exploits the vulnerability to use a...

6.1CVSS6.3AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/06/22 12:00 a.m.10 views

PT-2023-21474 · Unknown · Osd Bare Metal Server

Name of the Vulnerable Software and Affected Versions: OSD Bare Metal Server affected versions not specified Description: The issue concerns the use of a cryptographic algorithm in the OSD Bare Metal Server that is no longer considered sufficiently secure. Recommendations: At the moment, there is...

7.8CVSS7.5AI score0.00108EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/06/22 12:00 a.m.10 views

PT-2023-21482 · Hcl · Hcl Bigfix Osd Bare Metal Server

Name of the Vulnerable Software and Affected Versions: HCL BigFix OSD Bare Metal Server versions 311.12 or lower Description: The issue allows an attacker to supply invalid input, causing the server to perform a redirect to an attacker-controlled domain. This is achieved through a Host Header...

6.1CVSS6.2AI score0.00305EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:21 a.m.7 views

SUSE CVE-2015-2192

Integer overflow in the dissectosd2cdbcontinuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1.12.x before 1.12.4 allows remote attackers to cause a denial of service infinite loop via a crafted length field in a packet...

5CVSS5.8AI score0.02509EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.28 views

Mageia: Security Advisory (MGASA-2021-0207)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.9AI score0.02128EPSS
SaveExploits0References4
Rows per page
Query Builder