Lucene search
K

425 matches found

Vulnrichment
Vulnrichment
added 2025/03/13 5:34 p.m.8 views

CVE-2024-30143 A path traversal vulnerability in HCL AppScan Traffic Recorder

HCL AppScan Traffic Recorder fails to adequately neutralize special characters within the filename, potentially allowing it to resolve to a location beyond the restricted directory. Potential exploits can completely disrupt or takeover the application or the computer where the application is...

4.3CVSS4.6AI score0.00357EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/13 12:0 a.m.3 views

HCL AppScan Traffic Recorder 路径遍历漏洞

HCL AppScan Traffic Recorder is a traffic recorder from HCL India. HCL AppScan Traffic Recorder suffers from a path traversal vulnerability that stems from a failure to adequately neutralize special characters in filenames, which could result in the complete destruction or takeover of the...

4.3CVSS6.8AI score0.00357EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2025/03/05 11:41 p.m.6 views

appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0 <=2.8), com.cloudbees.jenkins.plugins:additional-identities-plugin (>=109.v2c51a_117a_7b_4 <=141.vd9ede1e02477) +498 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (>=2.0 <=2.492.1)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0, =1.0, =109.v2c51a117a7b4, =1.155.v3d884c1bdee1, =4050.v8ba69b587c39, =4050.v8ba69b587c39, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.2.0, =2.0.0, =0.1.0, =0.2.0 and more Source cves: CVE-2025-27623https://vulners.com/cve/CVE-2025-276...

4.3CVSS6.3AI score0.00317EPSS
Exploits0
OSV
OSV
added 2024/10/31 9:15 a.m.4 views

CVE-2024-30149

HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...

6.5CVSS5.8AI score0.00167EPSS
Exploits0References1
NVD
NVD
added 2024/10/31 9:15 a.m.12 views

CVE-2024-30149

HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...

6.5CVSS0.00167EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/31 8:25 a.m.11 views

CVE-2024-30149 HCL AppScan Source is affected by an expired TLS/SSL certificate

HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...

4.8CVSS7AI score0.00167EPSS
Exploits0References1
CVE
CVE
added 2024/10/31 8:25 a.m.61 views

CVE-2024-30149

CVE-2024-30149 affects HCL AppScan Source versions 10.6.0 and earlier, with a root cause of improper validation of a TLS/SSL certificate for an executable. Public sources consistently state the issue in the AppScan Source

6.5CVSS5.2AI score0.00167EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/31 8:25 a.m.19 views

CVE-2024-30149 HCL AppScan Source is affected by an expired TLS/SSL certificate

HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...

4.8CVSS0.00167EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/31 12:0 a.m.5 views

HCL AppScan 安全漏洞

HCL AppScan is a suite of dynamic analysis testing tools from HCL Corporation, USA, which is primarily used for Web security testing. A security vulnerability exists in HCL AppScan version 10.6.0 and prior versions that stems from not properly validating the TLS/SSL certificate of an executable...

4.8CVSS6.7AI score0.00167EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/31 12:0 a.m.5 views

PT-2024-23213 · Hcl · Hcl Appscan Source

Name of the Vulnerable Software and Affected Versions: HCL AppScan Source versions 10.6.0 and below Description: The issue is related to improper validation of a TLS/SSL certificate for an executable. This could potentially lead to security risks if exploited. Recommendations: For HCL AppScan...

4.8CVSS6.9AI score0.00167EPSS
Exploits0References5
CNVD
CNVD
added 2023/10/23 12:0 a.m.26 views

HCL Technologies AppScan Presence Elevation of Privilege Vulnerability

HCL Technologies AppScan Presence is a suite of dynamic analysis testing tools from HCL Technologies, USA, which is mainly used for Web security testing. An elevation of privilege vulnerability exists in HCL Technologies AppScan Presence, which stems from the presence of an un-referenced service...

7.8CVSS7AI score0.00169EPSS
Exploits0References1
OSV
OSV
added 2023/10/17 3:15 p.m.6 views

CVE-2023-37537

An unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud ASoC, may allow a local attacker to gain elevated privileges...

7.8CVSS5.8AI score0.00169EPSS
Exploits0References1
NVD
NVD
added 2023/10/17 3:15 p.m.19 views

CVE-2023-37537

An unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud ASoC, may allow a local attacker to gain elevated privileges...

7.8CVSS7.7AI score0.00169EPSS
Exploits0References1
Prion
Prion
added 2023/10/17 3:15 p.m.23 views

Design/Logic Flaw

An unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud ASoC, may allow a local attacker to gain elevated privileges...

4.3CVSS7.6AI score0.00169EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/10/17 2:58 p.m.67 views

CVE-2023-37537

CVE-2023-37537 concerns an unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud (ASoC). The underlying issue is an unquoted service path that can be abused by a local attacker to gain elevated privileges. The CVSS metrics shown (LOCAL ...

7.8CVSS7.6AI score0.00169EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/17 2:58 p.m.13 views

CVE-2023-37537 HCL AppScan Presence deployed as Windows service might be vulnerable to an Unquoted Service Path vulnerability

An unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud ASoC, may allow a local attacker to gain elevated privileges...

7.8CVSS6.8AI score0.00169EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/10/17 2:58 p.m.22 views

CVE-2023-37537 HCL AppScan Presence deployed as Windows service might be vulnerable to an Unquoted Service Path vulnerability

An unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud ASoC, may allow a local attacker to gain elevated privileges...

7.8CVSS8.4AI score0.00169EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/10/17 12:0 a.m.5 views

HCL Technologies HCL AppScan 代码问题漏洞

HCL Technologies AppScan Presence is a suite of dynamic analysis testing tools from HCL Technologies, USA, which is mainly used for Web security testing. An elevation of privilege vulnerability exists in HCL Technologies AppScan Presence, which stems from the presence of an un-referenced service...

7.8CVSS7AI score0.00169EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2022/05/24 10:0 p.m.6 views

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1574 more potentially affected by CVE-2019-10405 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.17)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2019-10405 Source advisory: OSV:GHSA-47WC-P5CP-W7PW...

5.4CVSS6AI score0.65753EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2022/05/24 7:19 p.m.7 views

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1594 more potentially affected by CVE-2021-21697 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.30)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2021-21697 Source advisory: OSV:GHSA-CV2W-Q8C3-XJV7...

9.1CVSS7.2AI score0.0155EPSS
Exploits0
Rows per page
Query Builder