Lucene search
+L

534 matches found

OSV
OSV
added 2025/11/06 3:47 p.m.8 views

GHSA-X33C-7C2V-MRJ9 Apollo Router Affected by an Access Control Bypass on Polymorphic Types

Summary A vulnerability in Apollo Router allowed for unauthenticated queries to access data that required additional access controls. Router incorrectly handled access control directives on interface types/fields and their implementing object types/fields, applying them to interface types/fields...

7.5CVSS6.9AI score0.00311EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2025/11/06 3:47 p.m.14 views

Apollo Router Affected by an Access Control Bypass on Polymorphic Types

Summary A vulnerability in Apollo Router allowed for unauthenticated queries to access data that required additional access controls. Router incorrectly handled access control directives on interface types/fields and their implementing object types/fields, applying them to interface types/fields...

7.5CVSS6.9AI score0.00311EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2025/11/06 3:45 p.m.7 views

GHSA-G8JH-VG5J-4H3F Apollo Router Improperly Enforces Renamed Access Control Directives

Summary A vulnerability in Apollo Router allowed for unauthorized access to protected data through schema elements with access control directives @authenticated, @requiresScopes, and @policy that were renamed via @link imports. Router did not enforce renamed access control directives on schema...

7.5CVSS6.9AI score0.00297EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/11/06 3:45 p.m.11 views

Apollo Router Improperly Enforces Renamed Access Control Directives

Summary A vulnerability in Apollo Router allowed for unauthorized access to protected data through schema elements with access control directives @authenticated, @requiresScopes, and @policy that were renamed via @link imports. Router did not enforce renamed access control directives on schema...

7.5CVSS6.9AI score0.00297EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/28 12:0 a.m.9 views

PT-2025-44210

CVE-2025-89012 in Apache HTTP Server mods enables path traversal for file reads—patched Oct 30 release. Web admins: Lock down alias directives tight. Solid config audit seals it. CyberSecurity InfoSec Vulnerability...

7AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/17 8:40 a.m.18 views

CVE-2025-0277

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

6.5CVSS6.8AI score0.00285EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/16 9:15 a.m.10 views

CVE-2025-0277

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

6.1CVSS5.8AI score0.00285EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/16 9:15 a.m.10 views

CVE-2025-0276

HCL BigFix Modern Client Management MCM 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

6.1CVSS5.8AI score0.00285EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/16 9:15 a.m.48 views

CVE-2025-0276

HCL BigFix Modern Client Management MCM 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

6.5CVSS0.00285EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/16 8:27 a.m.4 views

CVE-2025-0277 HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

6.5CVSS6.4AI score0.00285EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/16 8:27 a.m.7 views

EUVD-2025-34725

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

6.5CVSS6.3AI score0.00285EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/16 8:25 a.m.27 views

EUVD-2025-34727

HCL BigFix Modern Client Management MCM 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

6.5CVSS6.3AI score0.00285EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.5 views

HCL BigFix Modern Client Management 安全漏洞

HCL BigFix Modern Client Management HCL Technologies BigFix MCM is a modern client management system from HCL India. A security vulnerability exists in HCL BigFix Modern Client Management 3.3 and earlier versions, which stems from the presence of insecure directives in the content security policy...

6.5CVSS6.6AI score0.00285EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-21877

Malware in sbrugna...

9.8CVSS7.3AI score0.02047EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-7234

Malware in sbrugna...

9.8CVSS9.5AI score0.01284EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2016-5451

Malware in sbrugna...

8.8CVSS8.8AI score0.03802EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2009-2454

Malware in sbrugna...

10CVSS6AI score0.02305EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2018-0812

Malware in sbrugna...

9.8CVSS9.3AI score0.0316EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-13822

Malware in sbrugna...

7.8CVSS7.5AI score0.0231EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2008-3445

Malware in sbrugna...

7.6CVSS6.1AI score0.02117EPSS
SaveExploits0References7
Rows per page
Query Builder