CVE-2024-42189

HCL BigFix Web Reports might be subject to a Denial of Service DoS attack, due to a potentially weak validation of an API parameter...

CVE-2024-42189

HCL BigFix Web Reports might be subject to a Denial of Service DoS attack, due to a potentially weak validation of an API parameter...

CVE-2024-42189

CVE-2024-42189 affects HCL BigFix Web Reports. The issue is a Denial of Service caused by potentially weak validation of an API parameter, exploitable over the network with no required privileges and user interaction. The provided documents describe the vulnerability and reference the KB0120585 a...

CVE-2024-42189 HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack

HCL BigFix Web Reports might be subject to a Denial of Service DoS attack, due to a potentially weak validation of an API parameter...

CVE-2024-42189 HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack

HCL BigFix Web Reports might be subject to a Denial of Service DoS attack, due to a potentially weak validation of an API parameter...

CVE-2024-42200 HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting XSS attack, due to a potentially weak validation of user input...

CVE-2024-42200

CVE-2024-42200 affects HCL BigFix Web Reports, where stored XSS can arise from weak input validation of user-supplied data. The consolidated sources describe the issue as a Stored Cross-Site Scripting vulnerability in the Web Reports component of HCL BigFix, with no detailed exploit path or confi...

CVE-2024-42200 HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting XSS attack, due to a potentially weak validation of user input...

CVE-2025-32776

creationtimestamp| type| source ---|---|--- 2025-04-15 17:55:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11869 2025-04-15 18:44:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmuqaman772v 2025-04-15 21:37:57+00:00| seen|...

Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.8 LTS and 12.8.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...

CVE-2025-32987

creationtimestamp| type| source ---|---|--- 2025-04-15 01:53:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11736 2025-04-15 03:34:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114339876352834552 2025-04-15 04:38:14+00:00| seen|...

PT-2025-16374 · Hcl · Hcl Bigfix Web Reports

Name of the Vulnerable Software and Affected Versions: HCL BigFix Web Reports affected versions not specified Description: The issue is related to a potentially weak validation of an API parameter, which might make HCL BigFix Web Reports subject to a Denial of Service DoS attack. Recommendations:...

PT-2025-16376 · Hcl · Hcl Bigfix Web Reports

Name of the Vulnerable Software and Affected Versions: HCL BigFix Web Reports affected versions not specified Description: The issue is related to a potentially weak validation of user input, which might make HCL BigFix Web Reports subject to a Stored Cross-Site Scripting XSS attack...

GHSA-33HW-XHFH-944R

creationtimestamp| type| source ---|---|--- 2025-04-14 23:53:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11732 2025-04-15 00:36:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114339178869394068 2025-04-22 02:39:11+00:00| seen|...

RHSA-2025:2701

creationtimestamp| type| source ---|---|--- 2025-04-10 21:49:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11358 2025-04-16 18:56:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12130...

Moodle 4.1.x < 4.1.7 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.25 / 3.11.x prior to 3.11.18 / 4.0.x prior to 4.0.12 / 4.1.x prior to 4.1.7 / 4.2.x prior to 4.2.4. It is, therefore, affected by multiple vulnerabilities: - XSS risk when manually running a task ...

Moodle 4.0.x < 4.0.12 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.25 / 3.11.x prior to 3.11.18 / 4.0.x prior to 4.0.12 / 4.1.x prior to 4.1.7 / 4.2.x prior to 4.2.4. It is, therefore, affected by multiple vulnerabilities: - XSS risk when manually running a task ...

CVE-2025-26670

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 19:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114304071440448367 2025-04-08 20:07:34+00:00| seen|...

CVE-2025-29794

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107 2025-04-08 19:48:42+00:00| seen|...

CVE-2025-25000

creationtimestamp| type| source ---|---|--- 2025-04-04 00:35:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10374 2025-04-04 03:47:39+00:00| seen| https://t.me/cvedetector/22056 2025-04-04 03:48:24+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114277646538523666...