Lucene search
K

2981 matches found

Vulnrichment
Vulnrichment
added 2024/01/16 5:33 p.m.15 views

CVE-2023-37523 HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags

Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker to execute a malicious script on the user's browser...

5.6CVSS7.1AI score0.00392EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/16 5:33 p.m.32 views

CVE-2023-37523 HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags

Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker to execute a malicious script on the user's browser...

5.6CVSS9.7AI score0.00392EPSS
Exploits0References1
CVE
CVE
added 2024/01/16 5:33 p.m.59 views

CVE-2023-37523

CVE-2023-37523 affects HCL BigFix Bare OSD Metal Server WebUI versions 311.19 or lower. The vulnerability arises from missing or insecure tags in the WebUI, which could allow an attacker to execute a malicious script in the user’s browser. Affected component is the WebUI frontend of the Bare OSD ...

9.8CVSS9.3AI score0.00392EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/01/16 4:15 p.m.26 views

CVE-2023-37522

HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious script on the user's browser...

9.8CVSS6.7AI score0.00413EPSS
Exploits0References1
NVD
NVD
added 2024/01/16 4:15 p.m.16 views

CVE-2023-37521

HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allow an attacker to execute a malicious attack...

5.3CVSS4.2AI score0.00326EPSS
Exploits0References1
OSV
OSV
added 2024/01/16 4:15 p.m.5 views

CVE-2023-37521

HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allow an attacker to execute a malicious attack...

5.3CVSS5.9AI score0.00326EPSS
Exploits0References1
Prion
Prion
added 2024/01/16 4:15 p.m.18 views

Information disclosure

HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allow an attacker to execute a malicious attack...

5CVSS7AI score0.00326EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2024/01/16 4:15 p.m.17 views

Design/Logic Flaw

HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious script on the user's browser...

7.5CVSS7.3AI score0.00413EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/16 3:59 p.m.4 views

CVE-2023-37522 HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags

HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious script on the user's browser...

5.6CVSS7.3AI score0.00413EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/16 3:59 p.m.28 views

CVE-2023-37522 HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags

HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious script on the user's browser...

5.6CVSS9.7AI score0.00413EPSS
Exploits0References1
CVE
CVE
added 2024/01/16 3:59 p.m.51 views

CVE-2023-37522

The CVE-2023-37522 entry concerns HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower, where missing or insecure tags can allow a browser-exploiting XSS attacker to run malicious scripts in a user’s browser. Root cause: insecure/missing tags in the WebUI. Impact: could compromise user ...

9.8CVSS9.4AI score0.00413EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/16 3:55 p.m.13 views

CVE-2023-37521 HCL BigFix OSD Bare Metal Server WebUI is affected by sensitive information disclosure

HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allow an attacker to execute a malicious attack...

2.3CVSS6.7AI score0.00326EPSS
Exploits0References1
CVE
CVE
added 2024/01/16 3:55 p.m.54 views

CVE-2023-37521

CVE-2023-37521 affects HCL BigFix Bare OSD Metal Server WebUI versions 311.19 or lower. The issue is described as the inclusion of sensitive information in a query string, which could allow an attacker to execute a malicious attack. Documented impacts are information disclosure with potential abu...

5.3CVSS5.3AI score0.00326EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.5 views

HCL Technologies BigFix OSD Security Vulnerability

HCL Technologies BigFix OSD is part of a lifecycle management software from HCL Technologies, Inc. It is used for the deployment of operating systems. A security vulnerability exists in HCL Technologies BigFix Bare OSD Metal Server WebUI 311.19 and prior versions, which stems from the inclusion o...

5.3CVSS6.5AI score0.00326EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.5 views

HCL Technologies BigFix OSD Security Vulnerability

HCL Technologies BigFix OSD is part of a lifecycle management software from HCL Technologies, Inc. It is used for the deployment of operating systems. A security vulnerability exists in HCL Technologies BigFix Bare OSD Metal Server WebUI 311.19 and prior versions, which stems from the absence or...

9.8CVSS6.9AI score0.00413EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/01/16 12:0 a.m.4 views

PT-2024-12628 · Hcl · Hcl Bigfix Bare Osd Metal Server Webui

Name of the Vulnerable Software and Affected Versions: HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower Description: The issue is related to missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI, which could allow an attacker to execute a malicious script on the...

9.8CVSS9.3AI score0.00413EPSS
Exploits0References4
NVD
NVD
added 2023/12/30 7:15 p.m.19 views

CVE-2023-52263

Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect. This is related to browser/bravecontentbrowserclient.cc and browser/ui/webui/bravewebuicontrollerfactory.cc...

6.1CVSS0.00455EPSS
Exploits0References4
OSV
OSV
added 2023/12/30 7:15 p.m.4 views

CVE-2023-52263

Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect. This is related to browser/bravecontentbrowserclient.cc and browser/ui/webui/bravewebuicontrollerfactory.cc...

6.1CVSS6.8AI score
Exploits0References4
Prion
Prion
added 2023/12/30 7:15 p.m.14 views

Design/Logic Flaw

Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect. This is related to browser/bravecontentbrowserclient.cc and browser/ui/webui/bravewebuicontrollerfactory.cc...

5.8CVSS7.2AI score0.00455EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2023/12/30 12:0 a.m.19 views

CVE-2023-52263

Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect. This is related to browser/bravecontentbrowserclient.cc and browser/ui/webui/bravewebuicontrollerfactory.cc...

6.5AI score0.00455EPSS
Exploits0References4
Rows per page
Query Builder