HCL AppScan Source <= 10.6 Improper Certificate Validation (CVE-2024-30149)

The version of HCL AppScan Source installed on the remote Windows host is 10.6.0 or earlier. It is, therefore, affected by an improper certificate validation vulnerability. HCL AppScan Source does not properly validate a TLS/SSL certificate for an executable, which could allow an attacker to...

EUVD-2019-13931

Malware in sbrugna...

EUVD-2019-13934

Malware in sbrugna...

EUVD-2019-13998

Malware in sbrugna...

EUVD-2019-14000

Malware in sbrugna...

EUVD-2019-13932

Malware in sbrugna...

EUVD-2019-7005

Malware in sbrugna...

EUVD-2019-13995

Malware in sbrugna...

EUVD-2019-13933

Malware in sbrugna...

EUVD-2019-13999

Malware in sbrugna...

EUVD-2023-41424

Malicious code in bioql PyPI...

EUVD-2024-28079

Malicious code in bioql PyPI...

EUVD-2024-28085

Malicious code in bioql PyPI...

CVE-2019-16188

HCL AppScan Source before 9.03.13 is susceptible to XML External Entity XXE attacks in multiple locations. In particular, an attacker can send a specially crafted .ozasmt file to a targeted victim and ask the victim to open it. When the victim imports the .ozasmt file in AppScan Source, the conte...

CVE-2019-4392

HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...

CVE-2019-4324

"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."...

CVE-2019-4325

"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."...

CVE-2019-4323

"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."...

CVE-2019-4393

HCL AppScan Standard is vulnerable to excessive authorization attempts...

CVE-2019-4327

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...