DeutschShown in its original language — a full translation is planned for a future version.
HCL BigFix: Mehrere Schwachstellen
view advisory published 2024-07-10
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um einen Denial of Service Angriff durchzuführen, ertrauliche Informationen preiszugeben, Daten zu manipulieren und Sicherheitsmaßnahmen zu umgehen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-33883US | — | Exploit | ||
The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection. | ||||
| CVE-2024-29041US | — | — | ||
Express.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerabili… | ||||
| CVE-2023-42282US | critical9.8 | — | ||
The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic. | ||||
| CVE-2022-31147US | high7.5 | Exploit | ||
The jQuery Validation Plugin (jquery-validation) provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular expression denial of… | ||||
| CVE-2021-43306US | high7.5 | — | ||
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 me… | ||||
02
references
External citations — patches, advisories, analysis.
- HCL Security Bulletin vom 2024-12-18external
- HCL Security Bulletin vom 2024-07-10external
- HCL Security Bulletin vom 2024-07-10external
- HCL Security Bulletin vom 2024-07-10external
- HCL Article KB0114591 vom 2024-07-28external
- HCL Security Bulletin vom 2024-07-10external
- WID-SEC-W-2024-1590 - CSAF Versionself
- WID-SEC-2024-1590 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan