151 matches found
CVE-2024-30124 HCL Sametime is impacted by insecure services
HCL Sametime is impacted by insecure services in-use on the UIM client by default. An unused legacy REST service was enabled by default using the HTTP protocol. An attacker could potentially use this service endpoint maliciously...
CVE-2024-30124
CVE-2024-30124 affects HCL Sametime; an unused legacy REST service was enabled by default over HTTP in the UIM client. The issue allows a local attacker to potentially abuse the service endpoint, with the CVSS indicating Local access, low attack complexity, no privileges, and a LOW availability i...
PT-2024-23198
Name of the Vulnerable Software and Affected Versions HCL Sametime affected versions not specified Description The issue concerns insecure services in-use on the UIM client by default. Specifically, an unused legacy REST service was enabled by default using the HTTP protocol. This could potential...
CVE-2024-30124: Initialization of a Resource with an Insecure Default
HCL Sametime is impacted by insecure services in-use on the UIM client by default. An unused legacy REST service was enabled by default using the HTTP protocol. An attacker could potentially use this service endpoint maliciously...
CVE-2023-33018
Memory corruption while using the UIM diag command to get the operators name...
CVE-2023-33018 Integer Overflow to Buffer Overflow in User Identity Module
Memory corruption while using the UIM diag command to get the operators name...
CVE-2023-33018 Integer Overflow to Buffer Overflow in User Identity Module
Memory corruption while using the UIM diag command to get the operators name...
CVE-2023-33018
CVE-2023-33018 describes a memory corruption in the Qualcomm UIM (User Identity Module) related to the diag command used to retrieve the operator’s name. The CVE is rated HIGH with a CVSS v3.1 base score of 7.8 (LOCAL attack vector, LOW attack complexity, LOW privileges required, no user interact...
CVE-2023-33018: Integer Overflow to Buffer Overflow
Memory corruption while using the UIM diag command to get the operators name...
PT-2023-18308 · Ril · Ril
Name of the Vulnerable Software and Affected Versions: RIL affected versions not specified Description: The issue is related to memory corruption in RIL due to an integer overflow when triggering the qcril uim request apdu request. This can potentially lead to security risks. There is no...
The vulnerability of the SSPanel-Uim software interface allows a perpetrator to access confidential information.
The vulnerability of the SSPanel-Uim software interface is related to improper authorization. Exploiting this vulnerability can allow attackers to access confidential information...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
Information disclosure
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
SSPanel UIM 安全漏洞
SSPanel UIM is a multi-purpose proxy service sales management system designed for the Shadowsocks / V2Ray / Trojan protocols by the individual developer Anankke. A security vulnerability exists in SSPanel UIM version 2023.3, which stems from not restricting access to the interface, leading to the...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
CVE-2023-34965
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...
PT-2023-3710 · Unknown · Sspanel-Uim
Name of the Vulnerable Software and Affected Versions: SSPanel-Uim version 2023.3 Description: The issue is related to improper authorization in the /link/ interface of the SSPanel-Uim software. This can allow an attacker to gain access to confidential information, potentially leading to a leak o...
CVE-2023-34965
SSPanel-Uim 2023.3 contains an information-disclosure issue caused by improper authorization: the /link/ interface is not access-restricted, allowing potential leakage of user data. Multiple sources (NVD/NVD-derived entries and vendor/analyst databases) confirm that the vulnerability stems from n...