Lucene search
K

21 matches found

Snyk
Snyk
added 2026/03/17 4:45 a.m.4 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the uclobjectemit function when operating in UCLPARSERZEROCOPY mode and processing input containing a key with an embedded null byte. An attacker can cause a segmentation fault and disrupt service by submitting...

8.3CVSS5.8AI score0.00121EPSS
Exploits1References2
NVD
NVD
added 2026/03/17 4:16 a.m.0 views

CVE-2026-0708

A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language UCL input that contains a key with an embedded null byte. This can cause a segmentation fault SEGV fault in the uclobjectemit function when parsing and emitting the...

8.3CVSS0.00121EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/03/17 2:28 a.m.30 views

CVE-2026-0708 Libucl: libucl: denial of service via embedded null byte in ucl input

A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language UCL input that contains a key with an embedded null byte. This can cause a segmentation fault SEGV fault in the uclobjectemit function when parsing and emitting the...

8.3CVSS0.00121EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/03/17 12:0 a.m.5 views

PT-2026-25869

A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language UCL input that contains a key with an embedded null byte. This can cause a segmentation fault SEGV fault in the ucl object emit function when parsing and emitting the...

8.3CVSS5.8AI score0.00121EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-6043

Malware in sbrugna...

4CVSS6.4AI score0.00213EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2013-6044

Malware in sbrugna...

8.5CVSS6.3AI score0.00546EPSS
Exploits1References3
CNVD
CNVD
added 2019/01/03 12:0 a.m.1 views

HPE UCMDB Configuration Management Service Directory Traversal Vulnerability

HPE UCMDB full name Universal CMDB is a set of resource management solutions. The solution provides bottom-up functions including automatic discovery of IT infrastructure, data modeling, service mapping definition and service impact analysis, etc. Configuration Manager Service is one of the...

7.5CVSS6.8AI score0.01526EPSS
Exploits0References1
CNVD
CNVD
added 2018/07/03 12:0 a.m.3 views

Micro Focus Universal Configuration Management Database Server Cross-Site Request Forgery Vulnerability

Micro Focus Universal Configuration Management Database UCMDB is a suite of database software from Micro Focus UK that stores, controls and manages software and infrastructure components and their interrelationships.UCMDB Server is one of the UCMDB Server is one of the server applications. A...

8.8CVSS7.8AI score0.00094EPSS
Exploits0References1
CNVD
CNVD
added 2018/05/25 12:0 a.m.1 views

Micro Focus Universal CMDB, CMS and UCMDB Browser Cross-Site Scripting Vulnerabilities

Micro Focus Universal CMDB, CMS and UCMDB Browser are all products of Micro Focus, a UK-based company. Micro Focus Universal CMDB is a resource management solution; CMS is a CMDB configuration management system; UCMDB Browser is a lightweight, web-based client for accessing UCMDB Universal...

6.3CVSS6.2AI score0.00172EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2016/07/25 12:0 a.m.142 views

HP UCMDB Server Java Deserialization RCE

The HP Universal Configuration Management Database UCMDB Server running on the remote host is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated, remote attacker can...

9.8CVSS9.7AI score0.01216EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2015/09/22 12:0 a.m.36 views

HP Universal Configuration Management Database Server (UCMDB) Local Information Disclosure (HPSBGN03504)

The version of HP Universal Configuration Management Database Server UCMDB running on the remote web server is affected by an unspecified local information disclosure vulnerability. A local attacker can exploit this to gain access to admin or root password information. C Tenable Network Security,...

4.9CVSS5.6AI score0.00155EPSS
Exploits0References3
CNVD
CNVD
added 2015/09/10 12:0 a.m.3 views

HP UCMDB Local Information Disclosure Vulnerability

HP UCMDB is the federated configuration management database. HP UCMDB has a security vulnerability in its implementation that can be exploited by an attacker to cause a local information disclosure...

4.9CVSS6.4AI score0.00155EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2015/03/18 12:0 a.m.26 views

HP Universal Configuration Management Database Data Flow Probe Gateway Cross-Site Tracing

The version of HP Universal Configuration Management Database Data Flow Probe Gateway running on the remote web server is affected by a cross-site tracing vulnerability. A remote attacker can exploit this to gain access to information in HTTP headers such as cookies and authentication data...

5.6AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2015/03/18 12:0 a.m.94 views

HP Universal Configuration Management Database Server Authentication Bypass

The version of HP Universal Configuration Management Database Server running on the remote web server is affected by an authentication bypass vulnerability due to the JMX-Console component performing access control only for GET and POST methods. A remote attacker, using the HTTP HEAD method, can...

5CVSS5.7AI score0.57742EPSS
Exploits5References2
seebug.org
seebug.org
added 2014/04/21 12:0 a.m.24 views

HP Universal Configuration Management Database远程代码执行漏洞

Bugtraq ID:66962 CVE ID:CVE-2013-6214 HP Universal Configuration Management Database是惠普公司的统一配置管理数据库应用。 HP Universal Configuration Management Database存在一个未明安全漏洞,允许远程攻击者利用漏洞获取敏感信息。 0 HP Universal Configuration Management Database Integration Service v9.05 HP Universal Configuration Management...

4CVSS6.6AI score0.00213EPSS
Exploits1
securityvulns
securityvulns
added 2014/04/21 12:0 a.m.57 views

[security bulletin] HPSBMU02988 rev.1 - HP Universal Configuration Management Database, Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04220407 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04220407 Version: 1 HPSBMU02988 rev....

4CVSS0.2AI score0.00213EPSS
Exploits1
securityvulns
securityvulns
added 2014/04/21 12:0 a.m.35 views

HP Universal Configuration Management multiple security vulnerabilities

Code execution, information leakage...

8.5CVSS2.9AI score0.00546EPSS
Exploits2References2Affected Software1
seebug.org
seebug.org
added 2014/04/21 12:0 a.m.35 views

HP Universal Configuration Management Database远程代码执行漏洞

Bugtraq ID:66963 CVE ID:CVE-2013-6215 HP Universal Configuration Management Database是惠普公司的统一配置管理数据库应用。 HP Universal Configuration Management Database存在一个未明安全漏洞,允许远程攻击者利用漏洞以应用程序上下文执行任意代码。 0 HP Universal Configuration Management Database Integration Service v10.01 HP Universal Configuration...

8.5CVSS6.6AI score0.00546EPSS
Exploits1
Prion
Prion
added 2014/04/19 4:49 a.m.13 views

Design/Logic Flaw

Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 9.05, 10.01, and 10.10 allows remote authenticated users to obtain sensitive information via unknown vectors, aka ZDI-CAN-2042...

4CVSS6.2AI score0.00213EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2014/04/19 1:0 a.m.22 views

CVE-2013-6214

Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 9.05, 10.01, and 10.10 allows remote authenticated users to obtain sensitive information via unknown vectors, aka ZDI-CAN-2042...

5.7AI score0.00213EPSS
Exploits1References1
Rows per page
Query Builder