Lucene search
+L

31 matches found

CNNVD
CNNVD
•added 2025/01/23 12:00 a.m.•9 views

HCL BigFix Patch Management 代码问题漏洞

HCL BigFix Patch Management is a comprehensive patch management solution from HCL Corporation, USA, designed to help organizations effectively manage and deploy security and non-security patches for operating systems and applications. A security vulnerability exists in HCL BigFix Patch Management...

2.5CVSS7.1AI score0.00127EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/23 12:00 a.m.•3 views

CVE-2024-42187: Improper Limitation of a Pathname to a Restricted Directory

BigFix Patch Download Plug-ins are affected by path traversal vulnerability. The application could allow operators to download files from a local repository which is vulnerable to path traversal attacks...

5.3CVSS5.8AI score0.00156EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/23 12:00 a.m.•2 views

CVE-2024-42182: Server-Side Request Forgery (SSRF)

BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery SSRF vulnerability. It may allow the application to download files from an internally hosted server on localhost...

2.5CVSS5.8AI score0.00118EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/23 12:00 a.m.•19 views

PT-2025-2629 · Ibm · Bigfix Patch Download Plug-Ins

Name of the Vulnerable Software and Affected Versions: BigFix Patch Download Plug-ins affected versions not specified Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. It may allow the application to download files from an internally hosted server on localhost...

2.5CVSS7AI score0.00118EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/01/23 12:00 a.m.•14 views

HCL BigFix Patch Management 安全漏洞

HCL BigFix Patch Management is a comprehensive patch management solution from HCL Corporation, USA, designed to help organizations effectively manage and deploy security and non-security patches for operating systems and applications. A security vulnerability exists in HCL BigFix Patch Management...

2.5CVSS6.7AI score0.00144EPSS
SaveExploits0References2
OSV
OSV
•added 2023/10/11 6:15 a.m.•12 views

CVE-2022-42451

Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a local privileged user...

4.4CVSS5.8AI score0.0015EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/10/11 5:01 a.m.•49 views

CVE-2022-42451 HCL BigFix Patch Management is vulnerable to insecurely stored credentials

Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a local privileged user...

4.6CVSS4.9AI score0.0015EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/10/11 12:00 a.m.•17 views

PT-2023-14116 · Ibm · Bigfix Patch Management

Name of the Vulnerable Software and Affected Versions: BigFix Patch Management affected versions not specified Description: The issue concerns certain credentials within the BigFix Patch Management Download Plug-ins being stored insecurely. This could potentially expose them to a local privileged...

4.6CVSS6.4AI score0.0015EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/11 12:00 a.m.•3 views

CVE-2022-42451: Insufficiently Protected Credentials

Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a local privileged user...

4.6CVSS5.5AI score0.0015EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/11 12:00 a.m.•17 views

HCL Technologies BigFix Patch Management Security Vulnerability

HCL Technologies BigFix Patch Management is a comprehensive patch management solution from HCL Technologies, Inc. designed to help organizations effectively manage and deploy security and non-security patches for operating systems and applications. HCL Technologies BigFix Patch Management has a...

4.6CVSS6.9AI score0.0015EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2018/06/17 10:32 p.m.•32 views

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise, and products shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM Cloud Orchestrator, IBM Cloud Orchestrator Enterprise and supporting products shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. Vulnerability Details CVEID:...

4.3CVSS6.4AI score0.9986EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder