CVE-2024-42196

CVE-2024-42196 affects HCL Launch: it stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs. The NVD entry reports a HIGH confidentiality impact with LOCAL attack vector and low privileges required, with base scores around 5.5–6....

CVE-2024-42196 HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability

HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs...

PT-2024-29791 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue concerns HCL Launch storing potentially sensitive information in log files. This data could be accessed by a local user with permission to read HTTP request logs...

CVE-2024-42196: Insertion of Sensitive Information into Log File

HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs...

HCL Launch 安全漏洞

HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL, Inc. for handling the most complex deployment processes in DevOps. HCL Launch has a security vulnerability that stems from allowing potentially sensitive information to be stored in log files...

CVE-2024-42195

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

CVE-2024-42195

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

CVE-2024-42195 HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

CVE-2024-42195

CVE-2024-42195 concerns HCL DevOps Deploy / HCL Launch, where HTML injection in the Web UI could allow embedding arbitrary HTML tags and potentially disclose sensitive information. The connected documents corroborate the vulnerability type (HTML injection) and affected software name, and note tha...

CVE-2024-42195 HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

CVE-2024-42195: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

HCL Launch和HCL DevOps Deploy 安全漏洞

HCL Launch and HCL DevOps Deploy are both products of HCL Corporation, U.S.A. HCL Launch is a multi-functional, enterprise-grade continuous delivery automation software. Used to handle the most complex deployment processes in DevOps.HCL DevOps Deploy is an application. Can be mapped to your...

SUSE hackweek 跨站脚本漏洞

SUSE hackweek is a tool from SUSE Germany that nurtures hack ideas into projects and then collaborates on them. A cross-site scripting vulnerability exists in SUSE hackweek that stems from a lack of input cleanup and allows any user to launch a stored cross-site scripting attack...

SUSE CVE-2024-11700

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox 133 and Thunderbird 133...

gnome-shell: code execution in portal helper

A vulnerability was found in GNOME Shell. A portal helper can be launched automatically without user confirmation based on the network responses provided by an adversary...

gnome-shell: code execution in portal helper

A vulnerability was found in GNOME Shell. A portal helper can be launched automatically without user confirmation based on the network responses provided by an adversary...

PT-2024-10231

Name of the Vulnerable Software and Affected Versions MacOS affected versions not specified Description The issue is related to a synchronization error in the Launch Services interface of MacOS operating systems, which is a "race condition" scenario. This could allow an attacker to bypass the...

CVE-2024-10195 Tecno 4G Portable WiFi TR118 SMS Check goform_get_cmd_process sql injection

A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /goform/goformgetcmdprocess of the component SMS Check. The manipulation of the argument orderby leads to sql injection...

CVE-2024-10018

Improper permission control in the mobile application com.transsion.aivoiceassistant can lead to the launch of any unexported component...

CVE-2024-10018

The mobile application com.transsion.aivoiceassistant (associated with TECNO) is affected by an improper permission control vulnerability. This flaw allows for the launch of any unexported component within the application. While the vulnerability is classified as CRITICAL with a CVSS base score o...