Skip to contentSiemens Simatic S7-1500 Cpu 1518f-4 Pn/dp Mfp vulnerabilities
- python, netapp max data, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing...CVE-2020-15801Fix available9.8 Critical
- python, canonical ubuntu linux, debian linux +8 more +10 moreIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...CVE-2019-20907Fix available7.5 High
- python, netapp snapcenter, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on...CVE-2020-15523Fix available7.8 High
- openbsd openssh, netapp active iq unified manager, aff a700s firmware +9 more +11 moreThe client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an...CVE-2020-14145Fix available5.9 Medium
- sqlite, apple icloud, ipados +16 more +18 moreIn SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a...CVE-2020-15358Fix available5.5 Medium
- haxx curl, debian linux, fujitsu m10-1 firmware +10 more +12 morecurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...CVE-2020-8177Fix available7.8 High
- haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +5 more +7 morecurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...CVE-2020-8169Fix available7.5 High
- python, fedoraproject fedora, opensuse leap +4 more +6 moreIncorrect Calculation and Use of Insufficiently Random Values in PythonCVE-2020-14422Fix availableEPSS 12.7%5.9 Medium
- sqlite, debian linux, fedoraproject fedora +12 more +14 moreSQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite...CVE-2020-13871Fix available7.5 High
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreGnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of...CVE-2020-13777Public exploitFix availableEPSS 22.5%7.4 High
- systemd project systemd, fedoraproject fedora, netapp active iq unified manager +4 more +6 moresystemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x...CVE-2020-13776Fix available6.7 Medium
- openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more** DISPUTED ** The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server...CVE-2020-12062Fix availableDisputed7.5 High
- perl, fedoraproject fedora, netapp oncommand workflow automation +16 more +18 moreCVE-2020-12723 does not affect BellSoft softwareCVE-2020-12723Fix available7.5 High
- perl, fedoraproject fedora, netapp oncommand workflow automation +17 more +19 moreCVE-2020-10878 does not affect BellSoft softwareCVE-2020-10878Fix available8.6 High
- perl, fedoraproject fedora, opensuse leap +15 more +17 moreCVE-2020-10543 does not affect BellSoft softwareCVE-2020-10543Fix availableEPSS 11.3%8.2 High
- sqlite, apple icloud, ipados +19 more +21 moreext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the...CVE-2020-13630Fix available7.0 High
- sqlite, apple icloud, ipados +18 more +20 moreSQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables...CVE-2020-13631Fix available5.5 Medium
- sqlite, broadcom fabric operating system, canonical ubuntu linux +12 more +14 moreext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted...CVE-2020-13632Fix available5.5 Medium
- sqlite, apple icloud, ipados +15 more +17 moreSQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.CVE-2020-13434Fix available5.5 Medium
- sqlite, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreSQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.CVE-2020-13435Fix available5.5 Medium
- iproute2 project iproute2, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreiproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c.CVE-2019-20795Fix available4.4 Medium
- json-c, canonical ubuntu linux, debian linux +17 more +19 morejson-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as...CVE-2020-12762Fix available7.8 High
- openldap, apple mac os x, broadcom brocade fabric operating system +18 more +20 moreIn filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean...CVE-2020-12243Fix available7.5 High
- sqlite, canonical ubuntu linux, debian linux +18 more +20 moreSQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...CVE-2020-11655Fix available7.5 High
- sqlite, netapp ontap select deploy administration utility, oracle communications messaging server +12 more +14 moreIn SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by...CVE-2020-11656Fix available9.8 Critical
- gnu gnutls, canonical ubuntu linux, debian linux +5 more +7 moreGnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is...CVE-2020-11501Fix available7.4 High
- gnu glibc, debian linux, fedoraproject fedora +3 more +5 moreAn exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU...CVE-2020-6096Fix available8.1 High
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +3 more +5 moreAn out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal...CVE-2020-1751Fix available5.1 Medium
- icu-project international components for unicode, canonical ubuntu linux, debian linux +11 more +13 moreAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...CVE-2020-10531Fix available8.8 High
- gnu glibc, canonical ubuntu linux, debian linux +8 more +10 moreA use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the...CVE-2020-1752Fix available7.0 High
- gnu glibc, canonical ubuntu linux, debian linux +11 more +13 moreThe GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range...CVE-2020-10029Fix available5.5 Medium
- sqlite, canonical ubuntu linux, netapp cloud backup +11 more +13 moreIn SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference...CVE-2020-9327Fix available7.5 High
- [unknown] systemd, debian linux, redhat ceph storage +7 more +9 moreA heap use-after-free vulnerability was found in systemd before version v245-rc1, where...CVE-2020-1712Public exploitFix available7.8 High
- python, canonical ubuntu linux, netapp active iq unified manager +3 more +5 moreLib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service ...CVE-2019-9674Fix available7.5 High
- python, canonical ubuntu linux, debian linux +5 more +7 morePython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...CVE-2020-8492Fix available6.5 Medium
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure...CVE-2020-8315Fix available5.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +24 more +26 morelibxml as used in Nokogiri has an infinite loop in a certain end-of-file situationCVE-2020-7595Fix available7.5 High
- xmlsoft libxml2, debian linux, fedoraproject fedora +24 more +26 morexmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.CVE-2019-20388Fix available7.5 High
- freedesktop libbsd, canonical ubuntu linux, debian linux +4 more +6 morenlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name...CVE-2019-20367Fix available9.1 Critical
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +7 more +9 moreA code execution vulnerability exists in the directory rehashing functionality of E2fsprogs...CVE-2019-5188Fix available7.5 High
- sqlite, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations...CVE-2019-19959Fix available7.5 High
- sqlite, canonical ubuntu linux, debian linux +4 more +6 moreselectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a...CVE-2019-20218Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 morezipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update...CVE-2019-19925Fix available7.5 High
- sqlite, apache bookkeeper, netapp cloud backup +5 more +7 moreSQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window...CVE-2019-19924Fix availableEPSS 10.7%5.3 Medium
- sqlite, debian linux, netapp cloud backup +11 more +13 moreflattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving...CVE-2019-19923Fix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +12 more +14 morexmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...CVE-2019-19956Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moremultiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as...CVE-2019-19926Fix available7.5 High
- cyrusimap cyrus-sasl, apache bookkeeper, apple ipados +19 more +21 morecyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...CVE-2019-19906Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moreexprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer...CVE-2019-19880Fix available7.5 High
- sqlite, apache guacamole, netapp cloud backup +6 more +8 moreSQLite 3.30.1, during handling of CREATE TABLE and CREATE VIEW statements, does not consider...CVE-2019-19603Fix availableEPSS 11.0%7.5 High
- Show moreLoading…