<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: uci</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-45169: An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12</title><link>https://patchthecve.com/cve/CVE-2024-45169.html</link><guid>https://patchthecve.com/cve/CVE-2024-45169.html</guid><pubDate>Wed, 17 Jun 2026 07:53:42 +0000</pubDate><description>CRITICAL 9.8: An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code executio</description></item><item><title>CVE-2024-45168: An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12</title><link>https://patchthecve.com/cve/CVE-2024-45168.html</link><guid>https://patchthecve.com/cve/CVE-2024-45168.html</guid><pubDate>Wed, 17 Jun 2026 07:53:42 +0000</pubDate><description>CRITICAL 9.1: An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is transferred over a raw socket without any authentication mechanism. Thus, communication endpoints are not verifiable.</description></item><item><title>CVE-2024-45167: An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12</title><link>https://patchthecve.com/cve/CVE-2024-45167.html</link><guid>https://patchthecve.com/cve/CVE-2024-45167.html</guid><pubDate>Wed, 17 Jun 2026 07:53:42 +0000</pubDate><description>CRITICAL 9.8: An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code executio</description></item><item><title>CVE-2024-45166: An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12</title><link>https://patchthecve.com/cve/CVE-2024-45166.html</link><guid>https://patchthecve.com/cve/CVE-2024-45166.html</guid><pubDate>Wed, 17 Jun 2026 07:53:42 +0000</pubDate><description>CRITICAL 9.8: An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code executio</description></item><item><title>CVE-2024-45165: An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12</title><link>https://patchthecve.com/cve/CVE-2024-45165.html</link><guid>https://patchthecve.com/cve/CVE-2024-45165.html</guid><pubDate>Wed, 17 Jun 2026 07:53:42 +0000</pubDate><description>MEDIUM 5.3: An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between client and server with encryption. However, the key is derived from the string &quot;(c)2007 UCI Software GmbH B.Boll&quot; (without quotes). The key is both static and hardcoded. With access to messages, this resu</description></item></channel></rss>