CVE-2021-44228-Log4j

在应用于生产系统之前，请先测试此内容。 使用方法 从以下发布页面下载最新包：https://github.com/VerveIndustrialProtection/CVE-2021-44228-Log4j/releases 然后将其导入站点并应用计算机订阅。 检测方法 每个支持的操作系统有三种可用的检测方法。在使用这些检测方法之前，了解它们之间的差异非常重要。 也就是说，所有检测方法的使用方式完全相同。您只需针对设备使用特定操作系统的检测 Fixlet 执行操作，然后使用通用 Warning- Fixlet 或用于分类信息的通用分析来查看结果。 所有检测方法都能正确地对...

IBM BigFix Platform - Information Disclosure

IBM BigFix Platform 9.2 and 9.5 contains an information disclosure vulnerability caused by not enabling authenticated access in relay, letting remote attackers query and gather update and fixlet information, exploit requires no authentication. id: CVE-2019-4061 info: name: IBM BigFix Platform -...

BigFix-CopyFail-AlmaLinux-Content

Este repositorio no tiene un README...

EUVD-2026-66805

HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...

EUVD-2026-66806

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...

EUVD-2026-66757

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

EUVD-2026-66775

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...

CVE-2026-21807

HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...

CVE-2026-21808

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...

CVE-2026-21809

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

CVE-2026-21810

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...

CVE-2026-21808

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default, which can expose sensitive data and reveal internal application logic and architectural details to an attacker. The flaw is scored CVSS 4.1 (MEDIUM) , requiring a local attack with high complexity and high ...

CVE-2026-21808 HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...

CVE-2026-21807 HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow

HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...

CVE-2026-21807

HCL BigFix Quantum Risk Analyzer is affected by a vulnerability in its binary, which lacks several critical, industry-standard hardening protections. This absence could allow an attacker to cause a stack-based buffer overflow , potentially leading to crashes or arbitrary code execution. Affected ...

CVE-2026-21810 HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checking

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...

CVE-2026-21810

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity checking , which could allow an attacker to obtain sensitive information or modify the binary. The CVSS v3.1 base score is 4.4 (Medium) , with a local attack vector and high priv...

CVE-2026-21809 HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

CVE-2026-21809

HCL BigFix Quantum Risk Analyzer contains a validation process that returns overly descriptive error messages when processing malformed input, enabling an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input. The CVSS 3.1 score is 3.9 (LOW...

PT-2026-82330

Name of the Vulnerable Software and Affected Versions HCL BigFix Quantum Risk Analyzer affected versions not specified Description The software generates highly detailed logging information by default. This behavior increases the risk of sensitive data leakage and may allow an attacker to gain...