Lucene search
+L

781 matches found

OSV
OSV
•added 2025/10/12 3:15 a.m.•11 views

CVE-2025-31993

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery SSRF. An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server...

9.8CVSS5.8AI score0.00238EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/12 3:15 a.m.•20 views

CVE-2025-31993

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery SSRF. An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server...

9.8CVSS0.00238EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/12 2:41 a.m.•9 views

CVE-2025-31998 HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service...

3.5CVSS6.2AI score0.00391EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/12 2:41 a.m.•34 views

CVE-2025-31998 HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service...

3.5CVSS0.00391EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/12 2:27 a.m.•8 views

CVE-2025-31997 HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR)

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References IDOR. An attacker can bypass authorization and access resources in the system directly, for example database records or files...

4.2CVSS5.8AI score0.00224EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/12 2:27 a.m.•31 views

CVE-2025-31997

CVE-2025-31997 affects HCL Unica Centralized Offer Management. The vulnerability is an Insecure Direct Object Reference (IDOR) that could allow an unauthenticated or authorized user to bypass access controls and directly access resources (e.g., database records or files). Root cause is insecure o...

7.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/12 2:23 a.m.•7 views

CVE-2025-31993 HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery SSRF. An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server...

3.5CVSS5.8AI score0.00238EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/12 2:23 a.m.•30 views

CVE-2025-31993

CVE-2025-31993 : HCL Unica Centralized Offer Management is vulnerable to a Server-Side Request Forgery (SSRF) due to improper input validation. An attacker can submit malicious input to a server-hosted application to trigger SSRF. The NVD entry assigns CVSSv3.1 base metrics of AV:N/AC:L/PR:N/UI:N...

9.8CVSS5.8AI score0.00238EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/10/12 2:23 a.m.•21 views

CVE-2025-31993 HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery SSRF. An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server...

3.5CVSS0.00238EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/12 12:00 a.m.•18 views

PT-2025-41702

Name of the Vulnerable Software and Affected Versions HCL Unica Centralized Offer Management affected versions not specified Description The software is susceptible to a Server-Side Request Forgery SSRF issue. This occurs due to improper input validation, allowing an attacker to submit malicious...

9.8CVSS5.8AI score0.00238EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/10/12 12:00 a.m.•14 views

HCL Unica Centralized Offer Management 安全漏洞

HCL Unica Centralized Offer Management is a module of HCL India responsible for the unified management and distribution of offers. A security vulnerability exists in HCL Unica Centralized Offer Management that originates from an insecure direct object reference that could lead to unauthorized...

7.5CVSS6.6AI score0.00224EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/12 12:00 a.m.•17 views

HCL Unica Centralized Offer Management 安全漏洞

HCL Unica Centralized Offer Management is a module of HCL India responsible for the unified management and distribution of offers. A security vulnerability exists in HCL Unica Centralized Offer Management, which stems from mishandling of exceptions and could lead to disclosure of sensitive...

9.8CVSS7.6AI score0.00391EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/12 12:00 a.m.•2 views

CVE-2025-31998: Improper Check or Handling of Exceptional Conditions

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service...

9.8CVSS6.2AI score0.00391EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/12 12:00 a.m.•2 views

CVE-2025-31997: Authorization Bypass Through User-Controlled Key

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References IDOR. An attacker can bypass authorization and access resources in the system directly, for example database records or files...

7.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/12 12:00 a.m.•1 views

CVE-2025-31993: Server-Side Request Forgery (SSRF)

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery SSRF. An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server...

9.8CVSS5.7AI score0.00238EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2017-15217

Malware in sbrugna...

6.7CVSS6.6AI score0.00303EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/07 12:00 a.m.•16 views

Nozomi Networks Guardian/CMC SQL注入漏洞

Nozomi Networks Guardian/CMC is a centralized management console from Nozomi Networks, Inc. in the United States. Nozomi Networks Guardian/CMC suffers from a SQL injection vulnerability that stems from improper validation of input parameters, which could lead to a SQL injection attack...

6.5CVSS7.7AI score0.00239EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2023-38776

Malicious code in bioql PyPI...

4.8CVSS5.4AI score0.00413EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2022-28120

Malicious code in bioql PyPI...

9CVSS7AI score0.01112EPSS
SaveExploits0References1
Fedora
Fedora
•added 2025/10/03 1:17 a.m.•17 views

[SECURITY] Fedora 41 Update: freeipa-4.12.5-2.1.fc41

IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...

9.1CVSS6.9AI score0.00556EPSS
SaveExploits0
Rows per page
Query Builder