Lucene search
K

458 matches found

CNVD
CNVD
added 2026/03/31 12:0 a.m.2 views

Unspecified Vulnerability in HCL Traveler

HCL Traveler is a software from HCL India. It is used to provide automatic, bi-directional, wireless synchronization between HCL Domino servers and wireless handheld devices. HCL Traveler has a security vulnerability that stems from weak HTTP header validation, which can be exploited by an attack...

6.3CVSS5.9AI score0.00007EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/03/26 3:4 p.m.2 views

CVE-2026-25449

Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue affects Traveler: from n/a through 3.2.8.1...

9.8CVSS5.9AI score0.00061EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/24 9:31 p.m.3 views

EUVD-2026-15002

HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks...

6.3CVSS5.8AI score0.00007EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/24 9:31 p.m.0 views

EUVD-2026-14986

HCL Traveler is affected by sensitive information disclosure. The application generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces. Attackers could exploit this...

4.3CVSS5.8AI score0.00014EPSS
Exploits0References2
NVD
NVD
added 2026/03/24 9:16 p.m.0 views

CVE-2026-21790

HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks...

6.3CVSS0.00007EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/24 8:4 p.m.4 views

CVE-2026-21790 HCL Traveler is susceptible to a weak default HTTP header validation vulnerability

HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks...

6.3CVSS5.8AI score0.00007EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/24 8:4 p.m.3 views

CVE-2026-21790

HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks...

6.3CVSS5.8AI score0.00007EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/24 8:4 p.m.17 views

CVE-2026-21790 HCL Traveler is susceptible to a weak default HTTP header validation vulnerability

HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks...

6.3CVSS0.00007EPSS
Exploits0References1
CVE
CVE
added 2026/03/24 8:4 p.m.5 views

CVE-2026-21790

HCL Traveler is affected by CVE-2026-21790, a weak default HTTP header validation vulnerability that could allow bypassing authentication checks. The CVSS v3.1 base score is 6.3 (MEDIUM), with network attack vector, low attack complexity, and privileges required. The impact is low for confidentia...

6.3CVSS5.8AI score0.00007EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/24 7:48 p.m.2 views

CVE-2026-21783 HCL Traveler is affected by sensitive information disclosure

HCL Traveler is affected by sensitive information disclosure. The application generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces. Attackers could exploit this...

4.3CVSS5.8AI score0.00014EPSS
Exploits0References1
CVE
CVE
added 2026/03/24 7:48 p.m.7 views

CVE-2026-21783

CVE-2026-21783 affects HCL Traveler. The issue is sensitive information disclosure via error messages that reveal details such as internal paths, file names, tokens/credentials, error codes, or stack traces. This could give attackers insights into system architecture and potentially enable target...

4.3CVSS5.8AI score0.00014EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.1 views

PT-2026-27498

HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks...

6.3CVSS5.8AI score0.00007EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.5 views

HCL Traveler 安全漏洞

HCL Traveler is a software developed by the Indian company HCL. It enables automatic, bidirectional, and wireless synchronization between HCL Domino servers and wireless handheld devices. HCL Traveler has a security vulnerability that stems from the leakage of sensitive information due to incorre...

4.3CVSS5.8AI score0.00014EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.2 views

HCL Traveler 安全漏洞

HCL Traveler is a software from HCL India. It is used to provide automatic, bi-directional, wireless synchronization between HCL Domino servers and wireless handheld devices. HCL Traveler has a security vulnerability that stems from weak HTTP header validation, which can be exploited by an attack...

6.3CVSS5.8AI score0.00007EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/18 3:30 p.m.4 views

EUVD-2026-12821

Deserialization of Untrusted Data vulnerability in Shinetheme Traveler allows Object Injection.This issue affects Traveler: from n/a before 3.2.8.1...

9.8CVSS5.8AI score0.00061EPSS
Exploits0References2
NVD
NVD
added 2026/03/18 2:16 p.m.2 views

CVE-2026-25449

Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue affects Traveler: from n/a through 3.2.8.1...

9.8CVSS0.00061EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/18 1:12 p.m.1 views

CVE-2026-25449 WordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Shinetheme Traveler allows Object Injection.This issue affects Traveler: from n/a before 3.2.8.1...

9.8CVSS5.8AI score0.00061EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/18 1:12 p.m.4 views

CVE-2026-25449

Deserialization of Untrusted Data vulnerability in Shinetheme Traveler allows Object Injection.This issue affects Traveler: from n/a before 3.2.8.1...

9.8CVSS5.8AI score0.00061EPSS
Exploits0References2
CVE
CVE
added 2026/03/18 1:12 p.m.10 views

CVE-2026-25449

CVE-2026-25449 : The WordPress Traveler theme (Shinetheme Traveler) is affected prior to version 3.2.8.1 by a PHP object injection vulnerability caused by deserialization of untrusted data. The issue affects Traveler components (described as before 3.2.8.1) and is rated critical (CVSS 3.1 base sc...

9.8CVSS5.9AI score0.00061EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/18 1:12 p.m.28 views

CVE-2026-25449 WordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue affects Traveler: from n/a through 3.2.8.1...

9.8CVSS0.00061EPSS
Exploits0References1
Rows per page
Query Builder