CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a COM hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content. |
| 30/05/2025 |
| CVE-2024-42190 | 심각9.8 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content. | 30/05/2025 |
| CVE-2024-42213 | 보통5.3 | HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing or retrieved via predictable URLs or misconfigured permissions, leading to information disclosure. | 05/05/2025 |
| CVE-2024-42212 | 보통5.4 | HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions. | 05/05/2025 |
| CVE-2024-30146 | 낮음2.7 | Improper access control of endpoint in HCL Domino Leap
allows certain admin users to import applications from the
server's filesystem. | 30/04/2025 |
| CVE-2024-30145 | 보통6.1 | Multiple vectors in HCL Domino Volt and Domino Leap allow client-side
script injection in the authoring environment and deployed applications. | 30/04/2025 |
| CVE-2024-30115 | 보통5.4 | Insufficient sanitization policy in HCL Leap
allows client-side script injection in the deployed application through the
HTML widget. | 30/04/2025 |
| CVE-2023-45721 | 보통5.3 | Insufficient default configuration in HCL Leap
allows anonymous access to directory information. | 30/04/2025 |
| CVE-2023-37535 | 보통6.1 | Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap
allow script injection through query parameters. | 30/04/2025 |
| CVE-2023-37517 | 높음7.5 | Missing "no cache" headers in HCL Leap permits sensitive data to be cached. | 30/04/2025 |
| CVE-2022-42449 | 보통5.4 | Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications | 30/04/2025 |
| CVE-2022-27562 | 보통5.4 | Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications. | 30/04/2025 |
| CVE-2024-30152 | 심각9.8 | HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive information, modify data, or other impacts. | 25/04/2025 |
| CVE-2024-30127 | 낮음3.2 | Missing "no cache" headers in HCL Leap permits sensitive data to be cached. | 24/04/2025 |
| CVE-2023-37516 | 낮음3.2 | Missing "no cache" headers in HCL Leap permits user directory information to be cached. | 24/04/2025 |
| CVE-2022-44760 | 보통4.6 | Unsafe default file type filter policy in HCL
Leap allows execution of unsafe JavaScript in deployed applications. | 24/04/2025 |
| CVE-2022-44759 | 보통5.4 | Improper sanitization of SVG files in HCL Leap
allows client-side script injection in deployed applications. | 24/04/2025 |