Lucene search
+L

1930 matches found

CNNVD
CNNVD
•added 2022/12/12 12:00 a.m.•16 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL Technologies HCL Launch that stems from the fact that its Launch...

4.9CVSS5.4AI score0.0058EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/06 12:00 a.m.•11 views

PT-2022-9051 · Seagate · Seagate Central Nas

Name of the Vulnerable Software and Affected Versions: Seagate Central NAS versions STCG2000300, STCG3000300, and STCG4000300 Description: The web-management application on the affected devices allows OS command injection via mv backend launch in cirrus/application/helpers/mv backend helper.php b...

9.8CVSS7.5AI score0.12715EPSS
SaveExploits4References8
OSV
OSV
•added 2022/12/01 12:00 a.m.•19 views

PUB-A-242845514

In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.5AI score0.0013EPSS
SaveExploits0References2
OSV
OSV
•added 2022/12/01 12:00 a.m.•45 views

ASB-A-234013191

In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00189EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/11/28 2:54 p.m.•32 views

CVE-2022-42445 HCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445)

HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches...

4.9CVSS5.4AI score0.0058EPSS
SaveExploits0References1
CVE
CVE
•added 2022/11/28 2:54 p.m.•107 views

CVE-2022-42445

CVE-2022-42445 affects HCL Launch. A user with administrative privileges (including Manage Security) could recover credentials previously saved for performing authenticated LDAP searches, effectively exposing stored credentials from LDAP queries. The public description notes this as an insufficie...

4.9CVSS5AI score0.0058EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/28 2:54 p.m.•12 views

CVE-2022-42445 HCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445)

HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches...

4.9CVSS5.4AI score0.0058EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/11/28 12:00 a.m.•14 views

PT-2022-26436 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue allows a user with administrative privileges, including "Manage Security" permissions, to recover a credential previously saved for performing authenticated LDAP searches...

4.9CVSS4.9AI score0.0058EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/28 12:00 a.m.•7 views

CVE-2022-42445: Insufficiently Protected Credentials

HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches...

4.9CVSS5.8AI score0.0058EPSS
SaveExploits0References2
Citrix
Citrix
•added 2022/11/25 12:00 a.m.•17 views

CWA for Mac: How to disable Auto-Launch of CWA on MacOS

How to disable Auto-Launch of CWA on MacOS?...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2022/11/24 12:00 a.m.•67 views

MyBB MyCode Editor Cross-Site Scripting Vulnerability

MyBB MyBulletinBoard is a free and web-based forum software developed by MYBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. A cross-site scripting vulnerability exists in versions prior to mybb MyBB 1.8.32, which stems from a...

6.1CVSS6AI score0.00501EPSS
SaveExploits0References1
Citrix
Citrix
•added 2022/11/17 12:00 a.m.•13 views

Unable to Launch the Webex and Teams Meeting from Citrix Secure Web on Android

Unable to Launch the Webex or Teams Meeting from Citrix Secure Web on Android Error message "Blocked. Access to this site is restricted by admin policy" or blank page...

6.9AI score
SaveExploits0
NVD
NVD
•added 2022/10/31 10:15 p.m.•48 views

CVE-2021-27784

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

7.5CVSS0.0021EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/31 10:15 p.m.•32 views

Design/Logic Flaw

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

5CVSS7.5AI score0.0021EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/10/31 10:05 p.m.•15 views

CVE-2021-27784 HCL Launch container images may contain non-unique https certificates and database encryption key

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

5.9CVSS7.5AI score0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/10/31 10:05 p.m.•57 views

CVE-2021-27784 HCL Launch container images may contain non-unique https certificates and database encryption key

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

5.9CVSS7.7AI score0.0021EPSS
SaveExploits0References1
CVE
CVE
•added 2022/10/31 10:05 p.m.•75 views

CVE-2021-27784

CVE-2021-27784 affects HCL Launch Container images, where non-unique HTTPS certificates and a database encryption key are included. The documented vulnerability is limited to the container images and does not affect standard installer packages. The available remediation is a fix that provides dir...

7.5CVSS6.5AI score0.0021EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/10/31 12:00 a.m.•17 views

HCL Technologies HCL Launch 加密问题漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A cryptographic issue vulnerability exists in the HCL Technologies HCL Launch Container that stems from th...

7.5CVSS7.3AI score0.0021EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/31 12:00 a.m.•6 views

CVE-2021-27784: Use of a Broken or Risky Cryptographic Algorithm

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages...

7.5CVSS7.2AI score0.0021EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/10/31 12:00 a.m.•25 views

PT-2022-9869 · Hcl · Hcl Launch Container

Name of the Vulnerable Software and Affected Versions: HCL Launch Container images affected versions not specified Description: The issue concerns non-unique HTTPS certificates and a database encryption key in the provided HCL Launch Container images. A fix is available, which includes directions...

7.5CVSS7.4AI score0.0021EPSS
SaveExploits0References3
Rows per page
Query Builder