Skip to contentSiemens Sinec Infrastructure Network Services vulnerabilities
- isc bind, debian linux, fedoraproject fedora +13 more +15 moreLame cache can be abused to severely degrade resolver performanceCVE-2021-25219Fix availableEPSS 11.2%5.3 Medium
- civetweb, siemens sinec infrastructure network services +1 moreThe CivetWeb web library does not validate uploaded filepaths when running on an OS other than...CVE-2020-27304Fix available9.8 Critical
- haxx curl, apple macos, debian linux +26 more +28 moreWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...CVE-2021-22947Fix available5.9 Medium
- haxx curl, apple macos, debian linux +29 more +31 moreA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...CVE-2021-22946Fix available7.5 High
- isaacs node-tar, npmjs tar, oracle graalvm +1 more +3 moreArbitrary File Creation/Overwrite on Windows via insufficient relative path sanitizationCVE-2021-37713Fix available8.2 High
- npm arborist, oracle graalvm, siemens sinec infrastructure network services +2 moreUNIX Symbolic Link (Symlink) Following in @npmcli/arboristCVE-2021-39134Fix available8.2 High
- npm arborist, oracle graalvm, siemens sinec infrastructure network services +2 moreUNIX Symbolic Link (Symlink) Following in @npmcli/arboristCVE-2021-39135Fix available8.2 High
- isaacs node-tar, npmjs tar, debian linux +2 more +4 moreArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksCVE-2021-37712Fix available8.2 High
- isaacs node-tar, npmjs tar, debian linux +2 more +4 moreArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksCVE-2021-37701Fix available8.2 High
- openssl, debian linux, mcafee epolicy orchestrator +238 more +240 moreRead buffer overruns processing ASN.1 stringsCVE-2021-3712Public exploitFix availableEPSS 48.1%7.4 High
- nodejs node, node.js, debian linux +5 more +7 moreNode.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an...CVE-2021-22940Fix availableEPSS 13.9%7.5 High
- nodejs node, node.js, debian linux +6 more +8 moreIf the Node.js https API was used incorrectly and "undefined" was in passed for the ...CVE-2021-22939Fix availableEPSS 14.7%5.3 Medium
- nodejs node, node.js, netapp active iq unified manager +8 more +10 moreNode.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS,...CVE-2021-22931Fix availableEPSS 22.0%9.8 Critical
- c-ares, fedoraproject fedora, nodejs node.js +14 more +16 moreA flaw was found in c-ares library, where a missing input validation check of host names returned...CVE-2021-3672Fix available5.6 Medium
- nodejs node, node.js, debian linux +2 more +4 moreUse After Free in node.jsCVE-2021-22930Fix availableEPSS 36.5%9.8 Critical
- isaacs node-tar, tar project tar, oracle graalvm +1 more +3 moreArbitrary File Creation/Overwrite due to insufficient absolute path sanitizationCVE-2021-32804Public exploitFix availableEPSS 15.1%8.2 High
- isaacs node-tar, tar project tar, oracle graalvm +1 more +3 moreArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoningCVE-2021-32803Fix available8.2 High
- haxx curl, netapp active iq unified manager, clustered data ontap +19 more +21 morelibcurl-using applications can ask for a specific client certificate to be used in a transfer....CVE-2021-22926Fix availableEPSS 15.1%7.5 High
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to get content using the metalink feature, and a user name and password...CVE-2021-22923Fix available5.3 Medium
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to download content using the metalink feature, thecontents is verified...CVE-2021-22922Fix available6.5 Medium
- haxx curl, apple mac os x, macos +20 more +22 morecurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...CVE-2021-22925Fix available5.3 Medium
- haxx libcurl, debian linux, fedoraproject fedora +33 more +35 morelibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...CVE-2021-22924Public exploitFix available3.7 Low
- nodejs node, node.js, siemens sinec infrastructure network services +2 moreIncorrect Permission Assignment for Critical Resource in NodeCVE-2021-22921Fix available7.8 High
- nodejs node, node.js, siemens sinec infrastructure network services +2 moreOut-of-Bounds Read in Node.jsCVE-2021-22918Fix availableEPSS 23.1%5.3 Medium
- wibu codemeter, siemens pss cape, sicam 230 firmware +7 more +9 moreA buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An...CVE-2021-20093EPSS 33.3%9.1 Critical
- haxx curl, netapp cloud backup, h300e firmware +22 more +24 morecurl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a...CVE-2021-22897Fix available5.3 Medium
- haxx curl, netapp active iq unified manager, cloud backup +26 more +28 morecurl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed...CVE-2021-22901Fix availableEPSS 63.5%8.1 High
- haxx curl, debian linux, fedoraproject fedora +12 more +14 morecurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...CVE-2021-22898Fix available3.1 Low
- isc bind, debian linux, isc bind9 +12 more +14 moreA second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackCVE-2021-25216Fix availableEPSS 83.0%8.1 High
- isc bind, debian linux, fedoraproject fedora +14 more +16 moreAn assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itselfCVE-2021-25215Fix availableEPSS 11.7%7.5 High
- isc bind, debian linux, fedoraproject fedora +13 more +15 moreA broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedlyCVE-2021-25214Fix available6.5 Medium
- haxx libcurl, broadcom fabric operating system, debian linux +11 more +13 morecurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...CVE-2021-22890Fix available3.7 Low
- haxx libcurl, broadcom fabric operating system, debian linux +12 more +14 morecurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...CVE-2021-22876Fix available5.3 Medium
- openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 Medium
- npmjs hosted-git-info, siemens sinec infrastructure network services +1 moreRegular Expression Denial of Service (ReDoS)CVE-2021-23362Fix available5.3 Medium
- ssri project ssri, oracle graalvm, siemens sinec infrastructure network services +2 moreRegular Expression Denial of Service (ReDoS)CVE-2021-27290Fix available7.5 High
- nodejs node, node.js, fedoraproject fedora +11 more +13 moreNode.js badCVE-2021-22884Fix availableEPSS 36.8%7.5 High
- nodejs node, node.js, fedoraproject fedora +7 more +9 moreNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...CVE-2021-22883Fix availableEPSS 77.4%7.5 High
- isc bind, debian linux, fedoraproject fedora +5 more +7 moreA vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackCVE-2020-8625Fix availableEPSS 65.4%8.1 High
- nodejs node, node.js, debian linux +3 more +5 moreNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...CVE-2020-8287Public exploitFix availableEPSS 16.3%6.5 Medium
- nodejs node, node.js, debian linux +3 more +5 moreNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug...CVE-2020-8265Fix available8.1 High
- apple mac os x, macos, debian linux +22 more +24 morecurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...CVE-2020-8285Fix available7.5 High
- apple mac os x, macos, debian linux +17 more +19 morecurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...CVE-2020-8286Fix available7.5 High
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- haxx curl, apple mac os x, macos +22 more +24 moreA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...CVE-2020-8284Fix available3.7 Low
- y18n project y18n, oracle graalvm, siemens sinec infrastructure network services +2 morePrototype PollutionCVE-2020-7774Fix availableEPSS 69.6%7.3 High
- haxx libcurl, debian linux, oracle communications cloud native core policy +5 more +7 moreDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...CVE-2020-8231Fix available7.5 High
- sqlite, apple icloud, ipados +16 more +18 moreIn SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a...CVE-2020-15358Fix available5.5 Medium
- haxx curl, debian linux, fujitsu m10-1 firmware +10 more +12 morecurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...CVE-2020-8177Fix available7.8 High
- haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +5 more +7 morecurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...CVE-2020-8169Fix available7.5 High
- Show olderLoading…