24 matches found
EUVD-2024-39450
Malicious code in bioql PyPI...
EUVD-2024-39543
Malicious code in bioql PyPI...
EUVD-2022-45524
Malicious code in bioql PyPI...
EUVD-2024-39449
Malicious code in bioql PyPI...
EUVD-2024-39542
Malicious code in bioql PyPI...
CVE-2024-42184
BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme. It could allow a malicious operator to attempt to download files using the file:// URI scheme...
CVE-2024-42186
BigFix Patch Download Plug-ins are affected by an insecure protocol support. The application can allow improper handling of SSL certificates validation...
CVE-2024-42185
BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks. This allows an attacker to exploit this vulnerability by injecting malicious XML content, which can lead to various issues including denial of service and unauthorized access...
CVE-2024-42187
CVE-2024-42187 affects BigFix Patch Download Plug-ins with a path traversal vulnerability that could allow operators to download files from a local repository. The NVD entry provides CVSS 3.1: Local attack vector, high access complexity, low privileges required, user interaction needed, with a co...
CVE-2024-42183
BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability. It could allow a malicious operator to download files from arbitrary URLs without any proper validation or allowlist controls...
CVE-2024-42185
Technical details such as affected products, versions, and fixes for CVE-2024-42185 are not publicly provided in the connected documents. Monitor for updates from NVD, CVE List, and vendor advisories to obtain concrete information.
CVE-2024-42184
CVE-2024-42184 affects the BigFix Patch Download Plug-ins. The vulnerability arises from insecure support for the file:// URI scheme in the plug-ins, which could allow a user with local access to attempt to download files via file:// links. The available connected sources confirm the affected pro...
CVE-2024-42183
CVE-2024-42183 affects HCL BigFix Patch Download Plug-ins. The vulnerability allows arbitrary file download from arbitrary URLs due to insufficient validation/allowlist controls, potentially enabling a malicious operator to fetch files without proper checks. The documented CVSS v3.1 metrics indic...
CVE-2024-42182
BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery SSRF vulnerability. It may allow the application to download files from an internally hosted server on localhost...
HCL BigFix Patch Management 安全漏洞
HCL BigFix Patch Management is a comprehensive patch management solution from HCL Corporation, USA, designed to help organizations effectively manage and deploy security and non-security patches for operating systems and applications. A security vulnerability exists in HCL BigFix Patch Management...
HCL BigFix Patch Management 代码问题漏洞
HCL BigFix Patch Management is a comprehensive patch management solution from HCL Corporation, USA, designed to help organizations effectively manage and deploy security and non-security patches for operating systems and applications. A security vulnerability exists in HCL BigFix Patch Management...
HCL BigFix Patch Management 路径遍历漏洞
HCL BigFix Patch Management is a comprehensive patch management solution from HCL Corporation that helps organizations efficiently manage and deploy security and non-security patches for operating systems and applications. A security vulnerability exists in HCL BigFix Patch Management that stems...
HCL BigFix Patch Management 代码问题漏洞
HCL BigFix Patch Management is a comprehensive patch management solution from HCL Corporation, USA, designed to help organizations effectively manage and deploy security and non-security patches for operating systems and applications. A security vulnerability exists in HCL BigFix Patch Management...
PT-2025-2629 · Ibm · Bigfix Patch Download Plug-Ins
Name of the Vulnerable Software and Affected Versions: BigFix Patch Download Plug-ins affected versions not specified Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. It may allow the application to download files from an internally hosted server on localhost...
CVE-2022-42451
Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a local privileged user...