Lucene search
K

662 matches found

CNNVD
CNNVD
added 2022/05/12 12:0 a.m.2 views

HCL Technologies HCL Sametime 安全漏洞

HCL Sametime, a conferencing solution from HCL Technologies, has a security vulnerability in HCL Technologies HCL Sametime version 11.6 that stems from a lack of external URL absorption in FaviconService, which could be exploited by an attacker to specify the external URL where the online meeting...

8.8CVSS7.8AI score0.00352EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/05/12 12:0 a.m.3 views

HCL Technologies HCL Sametime 安全漏洞

HCL Sametime, a conferencing solution from HCL Technologies, has a security vulnerability in HCL Technologies HCL Sametime version 11.6, which stems from a lack of effective restrictions on sensitive information on websites, which could be exploited by attackers to gain access to sensitive...

5.3CVSS5.7AI score0.00204EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/05/12 12:0 a.m.4 views

HCL Technologies HCL Sametime 授权问题漏洞

HCL Sametime, a conferencing solution from HCL Technologies, is vulnerable to an authorization issue in HCL Sametime version 11.6, which stems from an application where users can read group conversations without actively participating, which could be exploited to read sensitive information...

7.1CVSS6.5AI score0.0018EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/05/12 12:0 a.m.3 views

HCL Technologies HCL Sametime 代码问题漏洞

HCL Sametime, a conferencing solution from HCL Technologies, has a security vulnerability in HCL Technologies HCL Sametime version 11.6. The vulnerability stems from the fact that the user SID in the application can be modified, which can be exploited to modify the SID to enable arbitrary file...

8.2CVSS7.5AI score0.00304EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/05/12 12:0 a.m.4 views

HCL Technologies HCL Sametime 安全漏洞

HCL Sametime, a conferencing solution from HCL Technologies, has a security vulnerability in HCL Technologies HCL Sametime version 11.6 that could be exploited by attackers to conduct clickjacking attacks in conference chats...

4.3CVSS5.2AI score0.00145EPSS
Exploits0References2
NVD
NVD
added 2022/05/06 6:15 p.m.18 views

CVE-2021-27760

An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could cause Remote Code Execution on another chat client by sending a specially formatted message through chat containing Javascript code...

6CVSS0.00472EPSS
Exploits0References1
OSV
OSV
added 2022/05/06 6:15 p.m.2 views

CVE-2021-27760

An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could cause Remote Code Execution on another chat client by sending a specially formatted message through chat containing Javascript code...

5.5CVSS5.9AI score0.00472EPSS
Exploits0References1
Prion
Prion
added 2022/05/06 6:15 p.m.12 views

Remote code execution

An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could cause Remote Code Execution on another chat client by sending a specially formatted message through chat containing Javascript code...

6CVSS5.9AI score0.00472EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/05/06 6:10 p.m.79 views

CVE-2021-27760

The CVE-2021-27760 entry concerns HCL Notes 11.0–11.0.1 FP4 Sametime Embedded chat clients, where an authenticated Sametime chat user can trigger Remote Code Execution on another chat client by sending a specially formatted message containing Javascript code. The vulnerability arises in group cha...

6CVSS5.3AI score0.00472EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/06 6:10 p.m.15 views

CVE-2021-27760 HCL Notes 11.0 - 11.0.1 FP4 Sametime Embedded chat clients are vulnerable to group chats loading script on restart

An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could cause Remote Code Execution on another chat client by sending a specially formatted message through chat containing Javascript code...

4.6CVSS6.2AI score0.00472EPSS
Exploits0References1
OSV
OSV
added 2022/02/21 6:15 p.m.2 views

CVE-2021-27755

"Sametime Android potential path traversal vulnerability when using File class"...

5.5CVSS6.1AI score0.00082EPSS
Exploits0References1
NVD
NVD
added 2022/02/21 6:15 p.m.9 views

CVE-2021-27753

"Sametime Android PathTraversal Vulnerability"...

5.5CVSS0.00082EPSS
Exploits0References1
NVD
NVD
added 2022/02/21 6:15 p.m.17 views

CVE-2021-27755

"Sametime Android potential path traversal vulnerability when using File class"...

5.5CVSS0.00082EPSS
Exploits0References1
OSV
OSV
added 2022/02/21 6:15 p.m.1 views

CVE-2021-27753

"Sametime Android PathTraversal Vulnerability"...

5.5CVSS5.8AI score0.00082EPSS
Exploits0References1
Prion
Prion
added 2022/02/21 6:15 p.m.17 views

Spoofing

"Sametime Android PathTraversal Vulnerability"...

2.1CVSS5.5AI score0.00082EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/02/21 6:15 p.m.20 views

Path traversal

"Sametime Android potential path traversal vulnerability when using File class"...

2.1CVSS5.6AI score0.00082EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/02/21 5:49 p.m.84 views

CVE-2021-27753

CVE-2021-27753 corresponds to a path traversal vulnerability affecting HCL Sametime for Android. CNNVD reports multiple path traversal issues in Sametime Android. NVD data shows CVSS-3.1 base score 5.5 (MEDIUM) with local access, low attack complexity, and high integrity impact. The connected sou...

5.5CVSS5.5AI score0.00082EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/02/21 5:49 p.m.16 views

CVE-2021-27755

"Sametime Android potential path traversal vulnerability when using File class"...

5.8AI score0.00082EPSS
Exploits0References1
CVE
CVE
added 2022/02/21 5:49 p.m.84 views

CVE-2021-27755

Technical details about CVE-2021-27755 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are stated. Monitor for updates from vendors and security advisories.

5.5CVSS5.5AI score0.00082EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2022/02/21 12:0 a.m.2 views

HCL Sametime 路径遍历漏洞

HCL Sametime is a conferencing solution from HCL Software. A path traversal vulnerability exists in HCL Sametime that stems from the fact that HCL Sametime for Android is susceptible to multiple path traversal vulnerabilities...

5.5CVSS5.8AI score0.00082EPSS
Exploits0References2
Rows per page
Query Builder