Skip to contentSiemens Simatic S7-1500 Cpu 1518-4 Pn/dp vulnerabilities
- python, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morePython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...CVE-2021-28861Fix availableDisputed7.4 High
- zlib, apple ipados, iphone os +29 more +31 morezlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c...CVE-2022-37434Public exploitFix availableEPSS 19.2%9.8 Critical
- sqlite, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more`libsqlite3-sys` via C SQLite improperly validates array indexCVE-2022-35737Public exploitFix availableEPSS 23.6%7.5 High
- gnu gnutls, debian linux, fedoraproject fedora +4 more +6 moreA vulnerability found in gnutls. This security flaw happens because of a double free error occurs...CVE-2022-2509Fix available7.5 High
- gnome libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morePossible cross-site scripting vulnerability in libxml after commit 960f0e2.CVE-2016-3709Fix available6.1 Medium
- libtirpc project libtirpc, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process...CVE-2021-46828Fix available7.5 High
- openssl, debian linux, fedoraproject fedora +20 more +22 moreAES OCB fails to encrypt some bytesCVE-2022-2097Public exploitFix available5.3 Medium
- openssl, netapp h300s firmware, h410c firmware +8 more +10 moreRSA implementation bug in AVX512IFMA instructionsCVE-2022-2274Public exploitFix availableEPSS 48.2%9.8 Critical
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...CVE-2022-32208Fix available5.9 Medium
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...CVE-2022-32207Fix availableEPSS 12.3%9.8 Critical
- haxx curl, debian linux, fedoraproject fedora +20 more +22 morecurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...CVE-2022-32206Fix availableEPSS 36.3%6.5 Medium
- haxx curl, apple macos, debian linux +20 more +22 moreA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...CVE-2022-32205Fix availableEPSS 31.5%4.3 Medium
- openssl, broadcom sannav, debian linux +29 more +31 moreThe c_rehash script allows command injectionCVE-2022-2068Fix availableEPSS 96.4%7.3 High
- haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 moreUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...CVE-2022-30115Fix available4.3 Medium
- haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 morelibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...CVE-2022-27779Fix available5.3 Medium
- haxx curl, netapp active iq unified manager, bh500s firmware +14 more +16 moreA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when...CVE-2022-27778Fix available8.1 High
- haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morelibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...CVE-2022-27782Fix available7.5 High
- haxx curl, debian linux, netapp clustered data ontap +12 more +14 morelibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...CVE-2022-27781Fix available7.5 High
- haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 moreThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...CVE-2022-27780Fix available7.5 High
- openldap, debian linux, netapp h300s firmware +8 more +10 moreIn OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the...CVE-2022-29155Fix availableEPSS 64.5%9.8 Critical
- xmlsoft libxml2, libxslt, debian linux +19 more +21 moreIn libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ...CVE-2022-29824Fix available6.5 Medium
- openssl, netapp a250 firmware, a700s firmware +28 more +30 moreResource leakage when decoding certificates and keysCVE-2022-1473Fix available7.5 High
- openssl, netapp a250 firmware, a700s firmware +27 more +29 moreIncorrect MAC key used in the RC4-MD5 ciphersuiteCVE-2022-1434Fix available5.9 Medium
- openssl, netapp a250 firmware, a700s firmware +28 more +30 moreOCSP_basic_verify may incorrectly verify the response signing certificateCVE-2022-1343Fix available5.3 Medium
- openssl, debian linux, fedoraproject fedora +37 more +39 moreThe c_rehash script allows command injectionCVE-2022-1292Public exploitFix availableEPSS 82.6%7.3 High
- haxx curl, broadcom fabric operating system, debian linux +13 more +15 moreA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...CVE-2022-27776Fix available6.5 Medium
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...CVE-2022-27775Fix available7.5 High
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...CVE-2022-27774Fix available5.7 Medium
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...CVE-2022-22576Fix available8.1 High
- e2fsprogs project e2fsprogs, fedoraproject fedora, redhat enterprise linux +3 more +5 moreAn out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a...CVE-2022-1304Fix available7.8 High
- python, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...CVE-2015-20107Public exploitFix available7.6 High
- gnu gzip, debian linux, redhat jboss data grid +5 more +7 moreAn arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is...CVE-2022-1271Fix available8.8 High
- gnu gcc, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morelibiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as...CVE-2022-27943Fix available5.5 Medium
- nokogiri, zlib, apple mac os x +28 more +30 moreNokogiri affected by zlib's Out-of-bounds Write vulnerabilityCVE-2018-25032Public exploitFix availableEPSS 51.7%7.5 High
- openssl, debian linux, fedoraproject fedora +470 more +472 moreInfinite loop in BN_mod_sqrt() reachable when parsing certificatesCVE-2022-0778Public exploitFix availableEPSS 73.2%7.5 High
- python, netapp active iq unified manager, ontap select deploy administration utility +3 more +5 moreIn Python before 3.10.3 on Windows, local users can gain privileges because the search path is...CVE-2022-26488Public exploitFix available7.0 High
- xmlsoft libxml2, apple ipados, iphone os +36 more +38 morevalid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.CVE-2022-23308Fix available7.5 High
- gnu gnutls, netapp active iq unified manager, hci bootstrap os +5 more +7 moreA NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally...CVE-2021-4209Fix available6.5 Medium
- cyrusimap cyrus-sasl, debian linux, fedoraproject fedora +8 more +10 moreIn Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for...CVE-2022-24407Fix available8.8 High
- kernel util-linux, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support....CVE-2022-0563Fix available5.5 Medium
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.CVE-2022-25314Public exploitFix available7.5 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.CVE-2022-25315Public exploitFix available9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via...CVE-2022-25313Public exploitFix available6.5 Medium
- libexpat project libexpat, debian linux, oracle http server +5 more +7 morexmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...CVE-2022-25236Public exploitFix availableEPSS 35.3%9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 morexmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...CVE-2022-25235Public exploitFix available9.8 Critical
- linux kernel, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +5 more +7 moreIn gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not...CVE-2021-44879Fix available5.5 Medium
- python, fedoraproject fedora, netapp active iq unified manager +10 more +12 moreA flaw was found in Python, specifically within the urllib.parse module. This module helps break...CVE-2022-0391Fix available7.5 High
- gnu glibc, debian linux, netapp e-series performance analyzer +10 more +12 moreA flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to...CVE-2021-3999Fix available7.8 High
- gnu glibc, netapp h300s firmware, h410c firmware +7 more +9 moreA flaw was found in glibc. The realpath() function can mistakenly return an unexpected value,...CVE-2021-3998Fix available7.5 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreExpat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.CVE-2022-23990Public exploitFix available7.5 High
- Show moreLoading…