3413 matches found
CVE-2022-24685
Removed by vendor...
CVE-2022-24685
HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage. Fixed in 1.0.18, 1.1.12, and 1.2.6...
CVE-2022-24685
HashiCorp Nomad and Nomad Enterprise were affected in versions 1.0.17, 1.1.11, and 1.2.5 due to invalid HCL in the jobs parse endpoint, which could cause excessive CPU usage (DoS). The issue is resolved in 1.0.18, 1.1.12, and 1.2.6. No exploitation details are provided in the sources.
HCL Sametime 路径遍历漏洞
HCL Sametime is a conferencing solution from HCL Software. A path traversal vulnerability exists in HCL Sametime that stems from the fact that HCL Sametime for Android is susceptible to multiple path traversal vulnerabilities...
Hashicorp Nomad 输入验证错误漏洞
Hashicorp Nomad is a distributed, data center-aware cluster and application scheduler from Hashicorp, USA. The program supports the deployment of microservices, batch, containerized and non-containerized applications. HashiCorp Nomad suffers from an Input Validation Error vulnerability that stems...
Nomad Malformed Job Parsing Results in Excessive CPU Usage
Summary Nomad and Nomad Enterprise “Nomad” allows anyone with access to Nomad’s API to submit HCL formatted jobs for parsing to return the equivalent JSON. This endpoint allowed malformed HCL configuration to be evaluated, resulting in excessive CPU usage on Nomad server agents. This vulnerabilit...
Vulnerabilities fixed in HCL Technologies Digital Experience
A Server Side Request Forgery SSRF vulnerability has been fixed in HCL Technologies Digital Experience formerly known as IBM WebSphere Portal. The vulnerability potentially allows a malicious person able to gain access to systems that they initially should not have access to. The researchers who...
HCL Lotus Notes V12 - Unquoted Service Path
Exploit Title: HCL Lotus Notes V12- Unquoted Service Path Exploit Author: Mert DAŞ Version: V12 Date: 01/12/2021 Vendor Homepage: https://www.hcltechsw.com/domino/download Tested on: Windows 10 ProcessId : 3860 Name : LNSUSvc DisplayName : HCL Notes Smart Upgrade Hizmeti PathName :...
HCL Lotus Notes V12 - Unquoted Service Path Vulnerability
Exploit Title: HCL Lotus Notes V12- Unquoted Service Path Exploit Author: Mert DAŞ Version: V12 Vendor Homepage: https://www.hcltechsw.com/domino/download Tested on: Windows 10 ProcessId : 3860 Name : LNSUSvc DisplayName : HCL Notes Smart Upgrade Hizmeti PathName : c:\HCL\Notes\SUService.exe...
HCL Notes 安全漏洞
HCL Notes is a highly secure local email client from HCL India. HCL Notes has a security vulnerability that allows an attacker to trigger a buffer overflow in HCL Notes via Message to trigger a denial of service and potentially run code...
HCL Notes 安全漏洞
HCL Notes is a highly secure local email client from HCL India. A security vulnerability exists in HCL Notes, which can be exploited by attackers to trigger a denial of service...
CVE-2020-14264
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
CVE-2020-14264
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
Design/Logic Flaw
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
CVE-2020-14264
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
CVE-2020-14264
CVE-2020-14264 affects HCL Traveler Companion for iOS, where the vulnerability stems from a weak cryptographic process in the MobileIron AppConnect SDK included by the app. The issue is a crypto-weakness in the iOS environment exposed via the SDK, potentially impacting confidentiality (per CVSS) ...
Hcl Technologies Hcl Traveler Companion 加密问题漏洞
Hcl Technologies Hcl Traveler Companion is an ios Iphone and Ipad application from Hcl Technologies India. It is used to read encrypted Hcl Notes emails on Apple devices. Hcl Technologies HCL Traveler Companion suffers from an encryption issue vulnerability that stems from an iOS weak encryption...
CVE-2021-27746
"HCL Connections Security Update for Reflected Cross-Site Scripting XSS Vulnerability"...