CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 30/04/2025 |
| CVE-2023-37535 | MITTEL6.1 | Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap
allow script injection through query parameters. | 30/04/2025 |
| CVE-2023-37517 | HOCH7.5 | Missing "no cache" headers in HCL Leap permits sensitive data to be cached. | 30/04/2025 |
| CVE-2022-42449 | MITTEL5.4 | Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications | 30/04/2025 |
| CVE-2022-27562 | MITTEL5.4 | Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications. | 30/04/2025 |