2416 matches found
CVE-2026-21808
HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...
CVE-2026-21809
HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...
CVE-2026-21810
HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...
CVE-2026-21808 HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information
HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...
CVE-2026-21807 HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow
HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...
CVE-2026-21807
HCL BigFix Quantum Risk Analyzer is affected by a vulnerability in its binary, which lacks several critical, industry-standard hardening protections. This absence could allow an attacker to cause a stack-based buffer overflow , potentially leading to crashes or arbitrary code execution. Affected ...
CVE-2026-21807 HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow
HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...
CVE-2026-21809 HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information
HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...
CVE-2026-21809
HCL BigFix Quantum Risk Analyzer contains a validation process that returns overly descriptive error messages when processing malformed input, enabling an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input. The CVSS 3.1 score is 3.9 (LOW...
CVE-2026-21809 HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information
HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...
CVE-2026-21810: Download of Code Without Integrity Check
HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...
CVE-2026-21807: Stack-based Buffer Overflow
HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...
PT-2026-82330
Name of the Vulnerable Software and Affected Versions HCL BigFix Quantum Risk Analyzer affected versions not specified Description The software generates highly detailed logging information by default. This behavior increases the risk of sensitive data leakage and may allow an attacker to gain...
PT-2026-82329
Name of the Vulnerable Software and Affected Versions HCL BigFix Quantum Risk Analyzer affected versions not specified Description The binary lacks several critical, industry-standard hardening protections, which could allow an attacker to cause a stack-based buffer overflow. A stack-based buffer...
CVE-2026-21809: Generation of Error Message Containing Sensitive Information
HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...
CVE-2026-21808: Insertion of Sensitive Information into Log File
HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...
OPENSUSE-SU-2026:21634-1 Security update for liboqs
This update for liboqs fixes the following issues: Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized encapsderand pointer dereference - CVE-2026-46344, CVE-2026-44518: Fixed out-of-bounds read in XMSS/XMSS^MT signatu...
GO-2026-6164 FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files in github.com/gtsteffaniak/filebrowser/backend
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files in github.com/gtsteffaniak/filebrowser/backend...