Skip to contentSiemens Simatic S7-1500 Cpu 1518f-4 Pn/dp Mfp vulnerabilities
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with...CVE-2019-3860Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require...CVE-2019-3859Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP...CVE-2019-3858Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3857Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2...CVE-2019-3856Fix available7.5 High
- libssh2, apple xcode, debian linux +14 more +16 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3855Fix available7.5 High
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...CVE-2019-9740Fix available6.1 Medium
- python, canonical ubuntu linux, debian linux +16 more +18 morePython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...CVE-2019-9636Fix available9.8 Critical
- gnu glibc, canonical ubuntu linux, mcafee web gateway +6 more +8 moreIn the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has...CVE-2019-9169Fix available9.8 Critical
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32...CVE-2019-7309Fix available5.5 Medium
- gnu glibc, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would...CVE-2016-10739Fix available5.3 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreThe string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the...CVE-2019-6488Fix available7.8 High
- openbsd openssh, netapp element software, ontap select deploy +7 more +9 moreIn OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a...CVE-2019-6110Public exploitEPSS 24.9%6.8 Medium
- openbsd openssh, apache mina sshd, canonical ubuntu linux +19 more +21 moreAn issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...CVE-2019-6111Public exploitFix availableEPSS 58.2%5.9 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +20 more +22 moreAn issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...CVE-2019-6109Fix available6.8 Medium
- gnu tar, debian linux, opensuse leap +3 more +5 moreGNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which...CVE-2018-20482Fix available4.7 Medium
- gnu glibc, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname...CVE-2018-19591Fix available7.5 High
- icu-project international components for unicode, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreInternational Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl...CVE-2018-18928Fix available9.8 Critical
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 morelibxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service ...CVE-2018-14567Fix available6.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 moreNokogiri NULL Pointer DereferenceCVE-2018-14404Fix available7.5 High
- gnupg libgcrypt, canonical ubuntu linux, debian linux +8 more +10 moreLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...CVE-2018-0495Fix available4.7 Medium
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreUncontrolled resource consumption in nokogiriCVE-2017-18258Fix available6.5 Medium
- sensible-utils project sensible-utils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moresensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the...CVE-2017-17512Fix available8.8 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +7 more +9 moreInteger overflow in international date handling in International Components for Unicode (ICU) for...CVE-2017-15422Fix available6.5 Medium
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreparser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro...CVE-2017-16931Fix available9.8 Critical
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreNokogiri gem, via libxml, is affected by DoS vulnerabilitiesCVE-2017-16932Fix available7.5 High
- xmlsoft libxml2, debian linux, google android +3 more +5 moreBuffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an...CVE-2017-7376Public exploitFix availableEPSS 23.2%9.8 Critical
- xmlsoft libxml2, debian linux, google android +3 more +5 moreA flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the...CVE-2017-7375Fix available9.8 Critical
- google android, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA remote code execution vulnerability in libxml2 could enable an attacker using a specially...CVE-2017-0663Fix available7.8 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreOut-of-bounds read in nokogiriCVE-2017-9050Fix available7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morelibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the...CVE-2017-9049Fix available7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morelibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function...CVE-2017-9048Fix available7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function...CVE-2017-9047Fix available7.5 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreThe iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with...CVE-2016-10228Fix available5.9 Medium
- xmlsoft libxml2, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreCVE-2016-9318 does not affect BellSoft softwareCVE-2016-9318Fix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +5 more +7 moreNokogiri does not forbid namespace nodes in XPointer rangesCVE-2016-4658Fix available9.8 Critical
- google chrome, xmlsoft libxml2, apple iphone os +14 more +16 moreUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...CVE-2016-5131Fix available8.8 High
- bzip bzip2, python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreUse-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a...CVE-2016-3189Fix availableEPSS 15.7%6.5 Medium
- debian mime-support, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morerun-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent...CVE-2014-7209Fix available7.5 High
- apple ipados, iphone os, macos +7 more +9 moreexpat 2.1.0 and earlier does not properly handle entities expansion unless an application...CVE-2013-0340Fix availableEPSS 19.4%6.8 Medium