Skip to contentSiemens Siplus S7-1500 Cpu 1518-4 Pn/dp Mfp vulnerabilities
- sqlite, netapp cloud backup, ontap select deploy administration utility +6 more +8 morepragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in...CVE-2019-19646Fix available9.8 Critical
- sqlite, netapp cloud backup, ontap select deploy administration utility +6 more +8 morealter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types...CVE-2019-19645Fix available5.5 Medium
- sqlite, netapp cloud backup, ontap select deploy administration utility +5 more +7 morelookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a...CVE-2019-193179.8 Critical
- debian shadow, linux, fedoraproject fedora +4 more +6 moreshadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory treesCVE-2013-4235Fix available4.7 Medium
- gnu bash, netapp hci management node, oncommand unified manager +5 more +7 moreAn issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By...CVE-2019-18276Public exploitFix available7.8 High
- sqlite, canonical ubuntu linux, oracle mysql workbench +4 more +6 moresqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and...CVE-2019-19244Fix available7.5 High
- sqlite, canonical ubuntu linux, oracle mysql workbench +5 more +7 moreSQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in...CVE-2019-19242Fix available5.9 Medium
- gnu glibc, canonical ubuntu linux, debian linux +4 more +6 moreOn the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the...CVE-2019-19126Fix available3.3 Low
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through...CVE-2019-18348Fix available6.1 Medium
- gnu libidn2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2...CVE-2019-12290Fix available7.5 High
- gnu libidn2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreidn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via...CVE-2019-18224Fix available9.8 Critical
- libssh2, debian linux, fedoraproject fedora +10 more +12 moreIn libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer...CVE-2019-17498Public exploitFix available8.1 High
- invisible-island ncurses, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThere is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the...CVE-2019-17594Fix available5.3 Medium
- invisible-island ncurses, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThere is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the...CVE-2019-17595Fix available5.4 Medium
- lz4 project lz4, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreLZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to...CVE-2019-17543Fix availableEPSS 10.5%8.1 High
- openbsd openssh, netapp cloud backup, steelstore cloud integrated storage +5 more +7 moreOpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a...CVE-2019-16905Fix available7.8 High
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +6 more +8 moreAn exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1...CVE-2019-5094Fix available7.5 High
- curl, debian linux, fedoraproject fedora +17 more +19 moreHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.CVE-2019-5482Fix availableEPSS 17.9%9.8 Critical
- curl, debian linux, fedoraproject fedora +12 more +14 moreDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.CVE-2019-5481Fix available9.8 Critical
- sqlite, canonical ubuntu linux, debian linux +20 more +22 moreIn SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other...CVE-2019-16168Fix available6.5 Medium
- libgcrypt20 project libgcrypt20, canonical ubuntu linux, opensuse leap +3 more +5 moreIt was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library....CVE-2019-13627Fix available6.3 Medium
- python, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...CVE-2019-16056Fix available7.5 High
- libexpat project libexpat, python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...CVE-2019-15903Fix available7.5 High
- gnu gcc, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThe POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple...CVE-2019-15847Fix available7.5 High
- openldap, apple mac os x, canonical ubuntu linux +9 more +11 moreAn issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session...CVE-2019-13565Fix available7.5 High
- openldap, apple mac os x, canonical ubuntu linux +9 more +11 moreAn issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator...CVE-2019-13057Fix available4.9 Medium
- gnu gdb, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreGNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is:...CVE-2019-1010180Fix available7.8 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap...CVE-2019-1010025Disputed5.3 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Re-mapping current loaded libray with malicious ELF file. The...CVE-2019-1010023Fix availableDisputed8.8 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using...CVE-2019-1010024Disputed5.3 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack...CVE-2019-1010022Fix availableDisputed9.8 Critical
- netfilter iptables, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least...CVE-2019-11360Fix available4.2 Medium
- curl, netapp oncommand insight, oncommand unified manager +9 more +11 moreA non-privileged user or program can put code and a config file in a known non-privileged path ...CVE-2019-54437.8 High
- libexpat project libexpat, canonical ubuntu linux, debian linux +9 more +11 moreIn libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of...CVE-2018-20843Fix available7.5 High
- gnupg libgcrypt, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel...CVE-2019-12904Fix availableDisputed5.9 Medium
- bzip bzip2, canonical ubuntu linux, debian linux +17 more +19 moreBZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are...CVE-2019-12900Fix available9.8 Critical
- python, canonical ubuntu linux, debian linux +14 more +16 moreA security regression of CVE-2019-9636 was discovered in python since commit...CVE-2019-10160Fix available9.8 Critical
- sqlite, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreSQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the...CVE-2019-8457Fix availableEPSS 45.4%9.8 Critical
- gnu gcc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morestack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler...CVE-2018-128868.1 High
- curl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...CVE-2019-5435Fix available3.7 Low
- curl, haxx libcurl, debian linux +12 more +14 moreA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...CVE-2019-5436Fix availableEPSS 49.7%7.8 High
- sqlite, sqlite sqlite3, canonical ubuntu linux +3 more +5 moreAn exploitable use after free vulnerability exists in the window function functionality of...CVE-2019-5018Fix available8.1 High
- python, canonical ubuntu linux, debian linux +11 more +13 moreurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...CVE-2019-9948Fix availableEPSS 11.8%9.1 Critical
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...CVE-2019-9947Fix available6.1 Medium
- gnu tar, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morepax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing...CVE-2019-9923Fix available7.5 High
- sqlite, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual...CVE-2019-9937Fix available7.5 High
- sqlite, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based...CVE-2019-9936Fix available7.5 High
- libssh2, debian linux, netapp ontap select deploy administration utility +10 more +12 moreA flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive...CVE-2019-3863Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way...CVE-2019-3862Fix available7.3 High
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a...CVE-2019-3861Fix available5.0 Medium
- Show moreLoading…