116 matches found
CVE-2026-21822 A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822).
HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...
CVE-2026-21822
HCL AppScan 360° is affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized file modif...
CVE-2026-21822 A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822).
HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...
CVE-2026-70433
Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
EUVD-2026-53527
Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-70433
Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-70433
Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-70433
The Jenkins HCL AppScan Plugin versions 1.8.3 and earlier are vulnerable to missing permission checks in multiple HTTP endpoints. Attackers possessing Overall/Read permission can exploit this flaw to enumerate credentials IDs of those stored in Jenkins. These IDs can be leveraged to facilitate su...
CVE-2026-70433: Missing Authorization
Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
PT-2026-68268
Name of the Vulnerable Software and Affected Versions Jenkins HCL AppScan Plugin versions prior to 1.8.4 Description Missing permission checks allow users with Overall/Read permission to enumerate the IDs of credentials stored within Jenkins. Recommendations Update Jenkins HCL AppScan Plugin to...
HCL AppScan Source <= 10.6 Improper Certificate Validation (CVE-2024-30149)
The version of HCL AppScan Source installed on the remote Windows host is 10.6.0 or earlier. It is, therefore, affected by an improper certificate validation vulnerability. HCL AppScan Source does not properly validate a TLS/SSL certificate for an executable, which could allow an attacker to...
EUVD-2019-13998
Malware in sbrugna...
EUVD-2019-13995
Malware in sbrugna...
EUVD-2019-14000
Malware in sbrugna...
EUVD-2019-7005
Malware in sbrugna...
EUVD-2019-13934
Malware in sbrugna...
EUVD-2019-13931
Malware in sbrugna...
EUVD-2019-13932
Malware in sbrugna...