38 matches found
PT-2025-6277
Name of the Vulnerable Software and Affected Versions: Dell UCC Edge version 2.3.0 Description: The issue concerns a Blind SSRF vulnerability in the Add Customer SFTP Server of Dell UCC Edge. An unauthenticated attacker with local access could exploit this, leading to Server-Side Request Forgery...
kernel: tty: serial: Fix refcount leak bug in ucc_uart.c
In the Linux kernel, the following vulnerability has been resolved: tty: serial: Fix refcount leak bug in uccuart.c In socinfo, offindnodebytype will return a node pointer with refcount incremented. We should use ofnodeput when it is not used anymore...
ucc-apac.com Cross Site Scripting vulnerability OBB-3588222
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-34024 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: A refcount leak bug was found in the ucc uart.c file. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.10.138,...
PT-2022-33339 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: A refcount leak bug was found in the ucc uart.c file. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.19.4, update ...
STARFACE UCC Client Code Issue Vulnerability
STARFACE UCC Client is a desktop client application for telephone systems from the German company STARFACE. A security vulnerability exists in STARFACE UCC Client versions prior to 6.7.1.204 WIndows. An attacker can exploit the vulnerability to execute code with System privileges...
CVE-2020-10515
STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006...
CVE-2020-10515
STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006...
Code injection
STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006...
CVE-2020-10515
STARFACE UCC Client for Windows is vulnerable before 6.7.1.204 to binary planting that allows code execution with SYSTEM privileges. Affected product: STARFACE UCC Client (Windows). Root cause: binary planting in the installer/loader path as described in CVE-2020-10515. Impact: remote code execut...
CVE-2020-10515
STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006...
ucc.edu.co XSS vulnerability
Open Bug Bounty ID: OBB-300831 Description| Value ---|--- Affected Website:| ucc.edu.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ucc.ie XSS vulnerability
Open Bug Bounty ID: OBB-136983 Description| Value ---|--- Affected Website:| ucc.ie Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
CVE-2007-4443
The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service continuous beep and server slowdown via a string containing many 0x07 characters in 1 a request to the images/ directory, 2 the Content-Type field, 3 a HEAD...
Design/Logic Flaw
The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service continuous beep and server slowdown via a string containing many 0x07 characters in 1 a request to the images/ directory, 2 the Content-Type field, 3 a HEAD...
CVE-2007-4443
The CVE-2007-4443 entry concerns the Windows UCC dedicated server for the Unreal engine (likely 2003/2004) where remote attackers can trigger a DoS by sending strings containing many 0x07 characters via requests to the images/ directory, the Content-Type header, a HEAD request, or other vectors. ...
CVE-2007-4443
The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service continuous beep and server slowdown via a string containing many 0x07 characters in 1 a request to the images/ directory, 2 the Content-Type field, 3 a HEAD...