129 matches found
PT-2024-23198
Name of the Vulnerable Software and Affected Versions HCL Sametime affected versions not specified Description The issue concerns insecure services in-use on the UIM client by default. Specifically, an unused legacy REST service was enabled by default using the HTTP protocol. This could potential...
CVE-2023-33018
Memory corruption while using the UIM diag command to get the operators name...
CVE-2023-33018
CVE-2023-33018 describes a memory corruption in the Qualcomm UIM (User Identity Module) related to the diag command used to retrieve the operator’s name. The CVE is rated HIGH with a CVSS v3.1 base score of 7.8 (LOCAL attack vector, LOW attack complexity, LOW privileges required, no user interact...
CVE-2023-33018 Integer Overflow to Buffer Overflow in User Identity Module
Memory corruption while using the UIM diag command to get the operators name...
CVE-2023-33018 Integer Overflow to Buffer Overflow in User Identity Module
Memory corruption while using the UIM diag command to get the operators name...
PT-2023-18308 · Ril · Ril
Name of the Vulnerable Software and Affected Versions: RIL affected versions not specified Description: The issue is related to memory corruption in RIL due to an integer overflow when triggering the qcril uim request apdu request. This can potentially lead to security risks. There is no...
The vulnerability of the SSPanel-Uim software interface allows a perpetrator to access confidential information.
The vulnerability of the SSPanel-Uim software interface is related to improper authorization. Exploiting this vulnerability can allow attackers to access confidential information...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
Information disclosure
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
PT-2023-3710 · Unknown · Sspanel-Uim
Name of the Vulnerable Software and Affected Versions: SSPanel-Uim version 2023.3 Description: The issue is related to improper authorization in the /link/ interface of the SSPanel-Uim software. This can allow an attacker to gain access to confidential information, potentially leading to a leak o...
SSPanel UIM 安全漏洞
SSPanel UIM is a multi-purpose proxy service sales management system designed for the Shadowsocks / V2Ray / Trojan protocols by the individual developer Anankke. A security vulnerability exists in SSPanel UIM version 2023.3, which stems from not restricting access to the interface, leading to the...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
CVE-2023-34965
SSPanel-Uim 2023.3 contains an information-disclosure issue caused by improper authorization: the /link/ interface is not access-restricted, allowing potential leakage of user data. Multiple sources (NVD/NVD-derived entries and vendor/analyst databases) confirm that the vulnerability stems from n...
Security Bulletin: Several System x and Flex Systems products are affected by vulnerabilities in OpenSSL (CVE-2013-6449, CVE-2013-4353 and CVE-2013-6450)
Summary Security vulnerabilities discovered in OpenSSL have been fixed in recent releases of several IBM System x and Flex Systems products. You may have already applied the updates containing these fixes. Vulnerability Details Abstract Security vulnerabilities discovered in OpenSSL have been fix...
CVE-2022-25694
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM...
Memory corruption
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM...