https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 07:00:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-250116 EUVD-2026-250116 https://cve.radiocsirt.org/vuln/euvd-2026-250116 https://cve.radiocsirt.org/vuln/fkie_cve-2025-52621 <p>HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.  The BigFix SaaS&#39;s HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.</p> <p>HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.  The BigFix SaaS&#39;s HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-52621 https://cve.radiocsirt.org/vuln/ghsa-r9j3-884r-cxhp <p>HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.  The BigFix SaaS&#39;s HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.</p> <p>HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.  The BigFix SaaS&#39;s HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.</p> https://cve.radiocsirt.org/vuln/ghsa-r9j3-884r-cxhp https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1854 <p>Ein Angreifer kann mehrere Schwachstellen in HCL BigFix Komponente ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in HCL BigFix Komponente ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1854