Lucene search
+L

84340 matches found

OSV
OSV
added 2026/07/16 1:28 p.m.6 views

MINI-X3VR-VHPM-5G4R

Bulletin has no description...

7.5CVSS4.2AI score0.00504EPSS
SaveExploits0
OSV
OSV
added 2026/07/16 1:28 p.m.6 views

MINI-PR6J-G9WJ-HWJ8

Bulletin has no description...

8.8CVSS4.2AI score0.00369EPSS
SaveExploits0
OSV
OSV
added 2026/07/16 1:28 p.m.6 views

MINI-H86F-G9XV-9Q55

Bulletin has no description...

7.5CVSS4.9AI score0.00113EPSS
SaveExploits0
OSV
OSV
added 2026/07/16 1:28 p.m.4 views

MINI-XM43-XFPF-9532

Bulletin has no description...

9.1CVSS4.2AI score0.006EPSS
SaveExploits0
OSV
OSV
added 2026/07/16 1:28 p.m.5 views

MINI-2674-VCJJ-5VFH

Bulletin has no description...

5.3CVSS6.1AI score0.00237EPSS
SaveExploits0
OSV
OSV
added 2026/07/16 1:28 p.m.7 views

MINI-CVX3-QW75-P955

Bulletin has no description...

6.1CVSS6.1AI score0.00223EPSS
SaveExploits0
OSV
OSV
added 2026/07/16 1:28 p.m.6 views

MINI-R7CW-QX36-G24Q

Bulletin has no description...

6.1CVSS6.1AI score0.00223EPSS
SaveExploits0
OSV
OSV
added 2026/07/16 1:27 p.m.6 views

MINI-5W53-PP4F-8JCR

Bulletin has no description...

7.5CVSS6.1AI score0.00441EPSS
SaveExploits0
OSV
OSV
added 2026/07/16 1:27 p.m.7 views

MINI-JCX7-RFPR-8PR3

Bulletin has no description...

6.9CVSS6.1AI score0.00265EPSS
SaveExploits0
OSV
OSV
added 2026/07/16 1:27 p.m.6 views

MINI-XXMQ-8CHH-F68J

Bulletin has no description...

6.3CVSS6.1AI score0.00263EPSS
SaveExploits0
CVE
CVE
added 2026/07/16 1:5 p.m.20 views

CVE-2026-35145

HCL DFXAnalytics is reported as affected by a Missing HTTP Strict-Transport-Security Header vulnerability. The issue arises because the application’s web responses do not include the Strict-Transport-Security header, potentially allowing an attacker to downgrade to HTTP and perform MITM attacks. ...

3.1CVSS6.1AI score0.00173EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/16 1:5 p.m.15 views

EUVD-2026-44920

HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. The application fails to implement the HTTP Strict Transport Security HSTS policy within its responses, which could allow a remote attacker to downgrade the communication channel to an unencrypted...

3.1CVSS6.1AI score0.00173EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/16 12:48 p.m.17 views

CVE-2026-35140

The CVE-2026-35140 entry concerns HCL DFXAnalytics and describes a Missing Secure attribute on session cookies created during authentication. The underlying issue is that cookies are not marked Secure, enabling potential interception of cookies or tokens over unencrypted channels. The available d...

7.2CVSS6.2AI score0.00161EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/07/16 12:23 p.m.9 views

CVE-2024-58360 stoatchat before 0.7.8 Unrestricted Account Creation

stoatchat versions before 0.7.8 fail to enforce account creation restrictions including invite-only mode, email verification, captcha, and shield verification. Attackers can create unlimited accounts with unverified email addresses, increasing denial-of-service risk and compromising service...

6.9CVSS5.3AI score
SaveExploits0References5
CVE
CVE
added 2026/07/16 12:23 p.m.22 views

CVE-2024-58360

CVE-2024-58360 affects stoatchat versions before 0.7.8. The issue: account creation restrictions (invite-only, email verification, captcha, shield verification) are not enforced, allowing attackers to create unlimited accounts with unverified emails. Impacts include higher denial-of-service risk ...

6.9CVSS6.1AI score0.00259EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/16 12:23 p.m.45 views

CVE-2024-58360 stoatchat before 0.7.8 Unrestricted Account Creation

stoatchat versions before 0.7.8 fail to enforce account creation restrictions including invite-only mode, email verification, captcha, and shield verification. Attackers can create unlimited accounts with unverified email addresses, increasing denial-of-service risk and compromising service...

6.9CVSS0.00259EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/16 12:17 p.m.15 views

CVE-2026-35148

HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints are accessible without any form of authentication in another browser. This allows any network user to invoke these APIs and interact with the application without verification of...

6.3CVSS0.00167EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/16 11:52 a.m.8 views

MINI-FJ5J-XJ6M-6WHW

Bulletin has no description...

6.1AI score
SaveExploits0
CVE
CVE
added 2026/07/16 11:2 a.m.19 views

CVE-2026-35148

HCL DFXServer is affected by a Missing Access Control vulnerability (CVE-2026-35148). The issue allows certain endpoints to be accessed without authentication in another browser, enabling any network user to invoke APIs without verification of identity or authorization. CVSS v3.1 base score: 6.3 ...

6.3CVSS6.1AI score0.00167EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/07/16 10:10 a.m.8 views

RHSA-2026:39879 Red Hat Security Advisory: rhc security update

Bulletin has no description...

8.2CVSS7AI score0.00655EPSS
SaveExploits0References19
Rows per page
Query Builder