Export limit exceeded: 196839 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (7 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-65022 1 Hcltech 1 Bigfix Mobile 2026-11-06 6.3 Medium
The MDM App Catalog / App Store preview does not properly sanitize or encode user-supplied HTML before rendering it.  Injected HTML can be displayed to users who view the preview, which may allow cross-site scripting (XSS) when a user interacts with the crafted content.
CVE-2025-0274 1 Hcltech 2 Bigfix Mobile, Bigfix Modern Client Management 2025-10-21 5.3 Medium
HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.
CVE-2025-0275 1 Hcltech 2 Bigfix Mobile, Bigfix Modern Client Management 2025-10-21 5.3 Medium
HCL BigFix Mobile 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.
CVE-2021-27782 1 Hcltech 1 Bigfix Mobile 2025-04-02 5.4 Medium
HCL BigFix Mobile / Modern Client Management Admin and Config UI passwords can be brute-forced. User should be locked out for multiple invalid attempts.
CVE-2021-27783 1 Hcltech 2 Bigfix Mobile, Bigfix Modern Client Management 2024-11-21 6.8 Medium
User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed.
CVE-2021-27781 1 Hcltech 2 Bigfix Mobile, Modern Client Management 2024-11-21 6.6 Medium
The Master operator may be able to embed script tag in HTML with alert pop-up display cookie.
CVE-2021-27780 1 Hcltech 2 Bigfix Mobile, Modern Client Management 2024-11-21 5.3 Medium
The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.