Skip to contentSiemens Simatic S7-1500 Cpu vulnerabilities
- freedesktop libbsd, canonical ubuntu linux, debian linux +4 more +6 morenlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name...CVE-2019-20367Fix available9.1 Critical
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +7 more +9 moreA code execution vulnerability exists in the directory rehashing functionality of E2fsprogs...CVE-2019-5188Fix available7.5 High
- sqlite, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations...CVE-2019-19959Fix available7.5 High
- sqlite, canonical ubuntu linux, debian linux +4 more +6 moreselectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a...CVE-2019-20218Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 morezipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update...CVE-2019-19925Fix available7.5 High
- sqlite, apache bookkeeper, netapp cloud backup +5 more +7 moreSQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window...CVE-2019-19924Fix availableEPSS 10.7%5.3 Medium
- sqlite, debian linux, netapp cloud backup +11 more +13 moreflattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving...CVE-2019-19923Fix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +12 more +14 morexmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...CVE-2019-19956Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moremultiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as...CVE-2019-19926Fix available7.5 High
- cyrusimap cyrus-sasl, apache bookkeeper, apple ipados +19 more +21 morecyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...CVE-2019-19906Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moreexprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer...CVE-2019-19880Fix available7.5 High
- sqlite, apache guacamole, netapp cloud backup +6 more +8 moreSQLite 3.30.1, during handling of CREATE TABLE and CREATE VIEW statements, does not consider...CVE-2019-19603Fix availableEPSS 11.0%7.5 High
- sqlite, netapp cloud backup, ontap select deploy administration utility +6 more +8 morepragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in...CVE-2019-19646Fix available9.8 Critical
- sqlite, netapp cloud backup, ontap select deploy administration utility +6 more +8 morealter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types...CVE-2019-19645Fix available5.5 Medium
- sqlite, netapp cloud backup, ontap select deploy administration utility +5 more +7 morelookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a...CVE-2019-193179.8 Critical
- debian shadow, linux, fedoraproject fedora +4 more +6 moreshadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory treesCVE-2013-4235Fix available4.7 Medium
- gnu bash, netapp hci management node, oncommand unified manager +5 more +7 moreAn issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By...CVE-2019-18276Public exploitFix available7.8 High
- sqlite, canonical ubuntu linux, oracle mysql workbench +4 more +6 moresqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and...CVE-2019-19244Fix available7.5 High
- sqlite, canonical ubuntu linux, oracle mysql workbench +5 more +7 moreSQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in...CVE-2019-19242Fix available5.9 Medium
- gnu glibc, canonical ubuntu linux, debian linux +4 more +6 moreOn the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the...CVE-2019-19126Fix available3.3 Low
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through...CVE-2019-18348Fix available6.1 Medium
- gnu libidn2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2...CVE-2019-12290Fix available7.5 High
- gnu libidn2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreidn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via...CVE-2019-18224Fix available9.8 Critical
- libssh2, debian linux, fedoraproject fedora +10 more +12 moreIn libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer...CVE-2019-17498Public exploitFix available8.1 High
- invisible-island ncurses, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThere is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the...CVE-2019-17594Fix available5.3 Medium
- invisible-island ncurses, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThere is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the...CVE-2019-17595Fix available5.4 Medium
- lz4 project lz4, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreLZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to...CVE-2019-17543Fix availableEPSS 10.5%8.1 High
- siemens development/evaluation kits for profinet io: dk standard ethernet controller, development/evaluation kits for profinet io: ek-ertec 200, development/evaluation kits for profinet io: ek-ertec 200p +201 more +203 moreA vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard...CVE-2019-109367.5 High
- openbsd openssh, netapp cloud backup, steelstore cloud integrated storage +5 more +7 moreOpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a...CVE-2019-16905Fix available7.8 High
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +6 more +8 moreAn exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1...CVE-2019-5094Fix available7.5 High
- curl, debian linux, fedoraproject fedora +17 more +19 moreHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.CVE-2019-5482Fix availableEPSS 17.9%9.8 Critical
- curl, debian linux, fedoraproject fedora +12 more +14 moreDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.CVE-2019-5481Fix available9.8 Critical
- sqlite, canonical ubuntu linux, debian linux +20 more +22 moreIn SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other...CVE-2019-16168Fix available6.5 Medium
- libgcrypt20 project libgcrypt20, canonical ubuntu linux, opensuse leap +3 more +5 moreIt was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library....CVE-2019-13627Fix available6.3 Medium
- python, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...CVE-2019-16056Fix available7.5 High
- libexpat project libexpat, python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...CVE-2019-15903Fix available7.5 High
- gnu gcc, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThe POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple...CVE-2019-15847Fix available7.5 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +15 more +17 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC (All...CVE-2019-109437.5 High
- siemens simatic cp 1626, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +32 more +34 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC (All...CVE-2019-109295.9 Medium
- openldap, apple mac os x, canonical ubuntu linux +9 more +11 moreAn issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session...CVE-2019-13565Fix available7.5 High
- openldap, apple mac os x, canonical ubuntu linux +9 more +11 moreAn issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator...CVE-2019-13057Fix available4.9 Medium
- gnu gdb, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreGNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is:...CVE-2019-1010180Fix available7.8 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap...CVE-2019-1010025Disputed5.3 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Re-mapping current loaded libray with malicious ELF file. The...CVE-2019-1010023Fix availableDisputed8.8 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using...CVE-2019-1010024Disputed5.3 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack...CVE-2019-1010022Fix availableDisputed9.8 Critical
- netfilter iptables, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least...CVE-2019-11360Fix available4.2 Medium
- curl, netapp oncommand insight, oncommand unified manager +9 more +11 moreA non-privileged user or program can put code and a config file in a known non-privileged path ...CVE-2019-54437.8 High
- libexpat project libexpat, canonical ubuntu linux, debian linux +9 more +11 moreIn libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of...CVE-2018-20843Fix available7.5 High
- gnupg libgcrypt, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel...CVE-2019-12904Fix availableDisputed5.9 Medium
- Show moreLoading…