Lucene search
+L

3456 matches found

NVD
NVD
added 2024/12/05 5:15 a.m.41 views

CVE-2024-42195

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

6.8CVSS0.0029EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/05 4:47 a.m.43 views

CVE-2024-42195 HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

3.1CVSS0.0029EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/05 4:47 a.m.85 views

CVE-2024-42195

CVE-2024-42195 concerns HCL DevOps Deploy / HCL Launch, where HTML injection in the Web UI could allow embedding arbitrary HTML tags and potentially disclose sensitive information. The connected documents corroborate the vulnerability type (HTML injection) and affected software name, and note tha...

6.8CVSS3.9AI score0.0029EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2024/12/05 4:47 a.m.11 views

CVE-2024-42195 HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

3.1CVSS6.8AI score0.0029EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/05 12:00 a.m.11 views

HCL Launch和HCL DevOps Deploy 安全漏洞

HCL Launch and HCL DevOps Deploy are both products of HCL Corporation, U.S.A. HCL Launch is a multi-functional, enterprise-grade continuous delivery automation software. Used to handle the most complex deployment processes in DevOps.HCL DevOps Deploy is an application. Can be mapped to your...

6.8CVSS6.8AI score0.0029EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/05 12:00 a.m.11 views

PT-2024-29790 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue allows a user to embed arbitrary HTML tags in the Web UI, potentially leading to sensitive information disclosure. This is due to an HTML injection...

6.8CVSS6.1AI score0.0029EPSS
SaveExploits0References5
NVD
NVD
added 2024/11/14 4:15 p.m.21 views

CVE-2024-42188

HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update data in certain scenarios...

4.6CVSS0.00175EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/14 4:15 p.m.21 views

CVE-2024-42188

HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update data in certain scenarios...

4.6CVSS5.8AI score0.00175EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/14 3:31 p.m.77 views

CVE-2024-42188

CVE-2024-42188 affects HCL Connections and describes a broken access control vulnerability that may allow an unauthorized user to update data in certain scenarios. Public technical details in connected documents include: affected product (HCL Connections) and the vulnerability class (broken acces...

4.6CVSS4.1AI score0.00175EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/14 3:31 p.m.35 views

CVE-2024-42188 HCL Connections is vulnerable to a broken access control vulnerability

HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update data in certain scenarios...

3.7CVSS0.00175EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/14 3:31 p.m.33 views

CVE-2024-42188 HCL Connections is vulnerable to a broken access control vulnerability

HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update data in certain scenarios...

3.7CVSS6.8AI score0.00175EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/14 12:00 a.m.9 views

HCL Connections 安全漏洞

HCL Connections is a suite of enterprise collaboration platforms from HCL Corporation, USA. A security vulnerability exists in HCL Connections that stems from unauthorized users updating data in certain circumstances...

4.6CVSS6.7AI score0.00175EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/12 5:15 p.m.29 views

CVE-2024-30133

HCL Traveler for Microsoft Outlook HTMO is susceptible to a control flow vulnerability. The application does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways...

5.3CVSS0.00256EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/12 4:23 p.m.39 views

CVE-2024-30133 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability

HCL Traveler for Microsoft Outlook HTMO is susceptible to a control flow vulnerability. The application does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways...

5.3CVSS0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/12 4:23 p.m.17 views

CVE-2024-30133 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability

HCL Traveler for Microsoft Outlook HTMO is susceptible to a control flow vulnerability. The application does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways...

5.3CVSS7AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/12 4:23 p.m.63 views

CVE-2024-30133

CVE-2024-30133 describes a control flow vulnerability in HCL Traveler for Microsoft Outlook (HTMO) . The affected software entry indicates that the application does not sufficiently manage its control flow during execution, allowing conditions where control flow can be modified in unexpected ways...

5.3CVSS5.2AI score0.00256EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/12 12:00 a.m.13 views

HCL Traveler 安全漏洞

HCL Traveler is a software from HCL Corporation, USA. used to provide automatic, bi-directional, wireless synchronization between HCL Domino servers and wireless handheld devices. A security vulnerability exists in HCL Traveler versions prior to 3.0.11 that stems from susceptibility to a control...

5.3CVSS6.7AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/07 9:15 a.m.51 views

CVE-2024-30142

HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized access or session cookies could be transferred over an unencrypted channel...

3.8CVSS0.00104EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/07 9:15 a.m.9 views

CVE-2024-30142

HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized access or session cookies could be transferred over an unencrypted channel...

3.8CVSS5.7AI score0.00104EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/07 9:15 a.m.30 views

CVE-2024-30140

HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result, it can poison the web cache and provide back to users being served the page...

5.4CVSS0.00237EPSS
SaveExploits0References1
Rows per page
Query Builder