4255 matches found
PT-2025-48338
File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0...
PT-2025-48337
Name of the Vulnerable Software and Affected Versions HCL Technologies Ltd. Unica version 12.0.0 Description A CSV formula injection issue exists in HCL Technologies Ltd. Unica. The issue allows for potential manipulation through crafted CSV files. Recommendations At the moment, there is no...
CVE-2025-51733
Cross-Site Request Forgery CSRF vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51735
CVE-2025-51735 corresponds to a CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0. The connected documents confirm the affected product/version but do not provide technical exploit details or concrete root-cause specifics beyond the CSV-injection description. The CVSS v3.1...
PT-2025-48336
Cross-site scripting XSS vulnerability in HCL Technologies Ltd. Unica 12.0.0...
EUVD-2025-199873
CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51735
CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51734
Cross-site scripting XSS vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51734
CVE-2025-51734 reflects a Cross-site Scripting (XSS) vulnerability in HCL Unica 12.0.0 . Provided data shows a CVSSv3.1 base score of 5.4 (Medium) with Attack Vector: Network , Attack Complexity: Low , Privileges Required: Low , and User Interaction: None , with impacts on Confidentiality: Low an...
CVE-2025-51733
CVE-2025-51733: Cross-Site Request Forgery (CSRF) vulnerability affecting HCL Technologies Ltd. Unica 12.0.0. Multiple sources (NVD, Red Hat, ENISA EUVD, CVE list, CNA metrics) confirm a CSRF issue with Unica 12.0.0. CVSSv3.1 base score is 5.5 (MEDIUM), with network attack vector, low attack comp...
CVE-2025-51735
CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0...
PT-2025-48335
Cross-Site Request Forgery CSRF vulnerability in HCL Technologies Ltd. Unica 12.0.0...
Mastering Software Governance with Hosted Technologies Inventory
Gain visibility into every technology in your environment and eliminate governance gaps...
PT-2025-41: The Twinkly Light Tree 3D firmware uses a vulnerable Blufi library
The vulnerability was identified in the Twinkly Light Tree 3D firmware, 2.8.18. An attacker within Bluetooth range, with physical access to a device running firmware prior to 2.9.0 and provisioning mode manually re-enabled could, in an attack scenario, interfere with the provisioning exchange and...
CVE-2025-0643
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS. This issue affects Pyxis Signage: through 31012025...
CVE-2025-0645
CVE-2025-0645 concerns Narkom Pyxis Signage (through version 31012025) with an Unrestricted Upload of File with Dangerous Type vulnerability. The issue allows uploading dangerous files that access functionality not properly constrained by ACLs, effectively enabling access beyond intended permissi...
CVE-2021-4467
Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...
CVE-2021-4467 Positive Technologies MaxPatrol 8 & XSpider Remote DoS
Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...
CVE-2021-4467
CVE-2021-4467 affects Positive Technologies MaxPatrol 8 and XSpider, where the client communication service listening on TCP port 2002 accepts new session IDs per connection without adequately throttling concurrent requests. An unauthenticated attacker could issue repeated HTTPS requests to cause...
