Lucene search

K

SINEMA Remote Connect Server Security Vulnerabilities

cve
cve

CVE-2022-32257

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to resources and potentially lead to code...

9.8CVSS

9.4AI Score

0.001EPSS

2024-03-12 11:15 AM
37
cve
cve

CVE-2022-32262

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a file upload server that is vulnerable to command injection. An attacker could use this to achieve arbitrary code...

9.8CVSS

9.7AI Score

0.002EPSS

2022-06-14 10:15 AM
45
5
cve
cve

CVE-2022-32261

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a misconfiguration in the APT update. This could allow an attacker to add insecure packages to the...

7.5CVSS

7.3AI Score

0.001EPSS

2022-06-14 10:15 AM
43
5
cve
cve

CVE-2022-32260

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain...

9.8CVSS

9.4AI Score

0.002EPSS

2022-06-14 10:15 AM
43
7
cve
cve

CVE-2022-32259

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of the affected application contain unit test scripts with sensitive information. An attacker could gain information about testing architecture and also tamper....

6.5CVSS

6.4AI Score

0.001EPSS

2022-06-14 10:15 AM
62
4
cve
cve

CVE-2022-32258

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains an older feature that allows to import device configurations via a specific endpoint. An attacker could use this vulnerability for information...

7.5CVSS

7AI Score

0.001EPSS

2022-06-14 10:15 AM
36
4
cve
cve

CVE-2022-32252

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The application does not perform the integrity check of the update packages. Without validation, an admin user might be tricked to install a malicious package, granting root privileges to an...

7.8CVSS

7.5AI Score

0.001EPSS

2022-06-14 10:15 AM
48
5
cve
cve

CVE-2022-32256

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to low privileged users accessing privileged...

6.5CVSS

6.2AI Score

0.001EPSS

2022-06-14 10:15 AM
48
5
cve
cve

CVE-2022-27221

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An attacker in machine-in-the-middle could obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown....

5.9CVSS

5.6AI Score

0.001EPSS

2022-06-14 10:15 AM
51
5
cve
cve

CVE-2022-29034

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An error message pop up window in the web interface of the affected application does not prevent injection of JavaScript code. This could allow attackers to perform reflected cross-site scripting (XSS)...

6.1CVSS

6AI Score

0.001EPSS

2022-06-14 10:15 AM
84
8
cve
cve

CVE-2022-32253

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). Due to improper input validation, the OpenSSL certificate's password could be printed to a file reachable by an...

7.5CVSS

7.4AI Score

0.001EPSS

2022-06-14 10:15 AM
34
3
cve
cve

CVE-2022-32255

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to limited...

5.3CVSS

5.1AI Score

0.001EPSS

2022-06-14 10:15 AM
48
5
cve
cve

CVE-2022-32254

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). A customized HTTP POST request could force the application to write the status of a given user to a log file, exposing sensitive user information that could provide valuable guidance to an...

7.5CVSS

7.2AI Score

0.001EPSS

2022-06-14 10:15 AM
50
6
cve
cve

CVE-2022-32251

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). There is a missing authentication verification for a resource used to change the roles and permissions of a user. This could allow an attacker to change the permissions of any user and gain the privileges ...

9.8CVSS

9.4AI Score

0.002EPSS

2022-06-14 10:15 AM
45
3
cve
cve

CVE-2022-27219

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers in the web server configured on port 443. This could aid attackers by making the servers more prone to clickjacking, channel downgrade...

4.3CVSS

4.5AI Score

0.001EPSS

2022-06-14 10:15 AM
35
6
cve
cve

CVE-2022-27220

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers in the web server configured on port 6220. This could aid attackers by making the servers more prone to clickjacking, channel downgrade...

4.3CVSS

4.5AI Score

0.001EPSS

2022-06-14 10:15 AM
46
6
cve
cve

CVE-2022-25315

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in...

9.8CVSS

9.8AI Score

0.02EPSS

2022-02-18 05:15 AM
413
4
cve
cve

CVE-2022-25313

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD...

6.5CVSS

7.9AI Score

0.006EPSS

2022-02-18 05:15 AM
185
4
cve
cve

CVE-2022-25314

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in...

7.5CVSS

8.8AI Score

0.009EPSS

2022-02-18 05:15 AM
197
3
cve
cve

CVE-2022-25236

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace...

9.8CVSS

9.5AI Score

0.035EPSS

2022-02-16 01:15 AM
432
5
cve
cve

CVE-2022-25235

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain...

9.8CVSS

9.6AI Score

0.015EPSS

2022-02-16 01:15 AM
396
4
cve
cve

CVE-2022-23102

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing...

6.1CVSS

5.9AI Score

0.003EPSS

2022-02-09 04:15 PM
72
cve
cve

CVE-2022-23990

Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog...

7.5CVSS

8.7AI Score

0.006EPSS

2022-01-26 07:15 PM
258
3
cve
cve

CVE-2022-23852

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero...

9.8CVSS

9.6AI Score

0.014EPSS

2022-01-24 02:15 AM
314
2
cve
cve

CVE-2022-22826

nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer...

8.8CVSS

9.2AI Score

0.007EPSS

2022-01-10 02:12 PM
191
4
cve
cve

CVE-2022-22827

storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer...

8.8CVSS

9.2AI Score

0.008EPSS

2022-01-10 02:12 PM
194
4
cve
cve

CVE-2022-22824

defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer...

9.8CVSS

9.5AI Score

0.008EPSS

2022-01-10 02:12 PM
231
4
cve
cve

CVE-2022-22823

build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer...

9.8CVSS

9.5AI Score

0.01EPSS

2022-01-10 02:12 PM
224
4
cve
cve

CVE-2022-22822

addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer...

9.8CVSS

9.5AI Score

0.003EPSS

2022-01-10 02:12 PM
259
5
cve
cve

CVE-2022-22825

lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer...

8.8CVSS

9.2AI Score

0.007EPSS

2022-01-10 02:12 PM
208
4
cve
cve

CVE-2021-46143

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for...

8.1CVSS

8.9AI Score

0.001EPSS

2022-01-06 04:15 AM
190
4
cve
cve

CVE-2021-45960

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing...

8.8CVSS

9.1AI Score

0.01EPSS

2022-01-01 07:15 PM
228
4
cve
cve

CVE-2021-41991

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random...

7.5CVSS

7.8AI Score

0.069EPSS

2021-10-18 02:15 PM
155
cve
cve

CVE-2021-34798

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and...

7.5CVSS

8.6AI Score

0.005EPSS

2021-09-16 03:15 PM
1461
5
cve
cve

CVE-2021-37193

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid (or...

4.3CVSS

4.6AI Score

0.001EPSS

2021-09-14 11:15 AM
24
cve
cve

CVE-2021-37191

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could brute force the usernames from the affected...

4.3CVSS

4.6AI Score

0.001EPSS

2021-09-14 11:15 AM
26
cve
cve

CVE-2021-37192

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve a list of network devices a known user can...

4.3CVSS

4.3AI Score

0.001EPSS

2021-09-14 11:15 AM
24
cve
cve

CVE-2021-37190

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known...

4.3CVSS

4.2AI Score

0.001EPSS

2021-09-14 11:15 AM
28
cve
cve

CVE-2021-37183

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software allows sending send-to-sleep notifications to the managed devices. An unauthenticated attacker in the same network of the affected system can abuse these notifications to cause a....

6.5CVSS

6.3AI Score

0.001EPSS

2021-09-14 11:15 AM
26
cve
cve

CVE-2021-37177

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected...

6.5CVSS

6.4AI Score

0.001EPSS

2021-09-14 11:15 AM
26
cve
cve

CVE-2021-22925

curl supports the -t command line option, known as CURLOPT_TELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEW_ENV variables, libcurlcould be made to pass on uninitialized data from a stack based.....

5.3CVSS

6.3AI Score

0.003EPSS

2021-08-05 09:15 PM
352
3
cve
cve

CVE-2021-22924

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths case insensitively,which could lead...

3.7CVSS

5.7AI Score

0.002EPSS

2021-08-05 09:15 PM
318
8
cve
cve

CVE-2021-20093

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime...

9.1CVSS

9.1AI Score

0.097EPSS

2021-06-16 12:15 PM
60
6
cve
cve

CVE-2020-25240

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the...

8.8CVSS

8.5AI Score

0.001EPSS

2021-03-15 05:15 PM
27
2
cve
cve

CVE-2020-25239

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow unauthorized actions via special urls for unpriviledged users. The settings of the UMC authorization server could be changed to add a rogue server by an attacker authenticating wi...

8.8CVSS

8.3AI Score

0.001EPSS

2021-03-15 05:15 PM
20
cve
cve

CVE-2020-7595

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file...

7.5CVSS

7.6AI Score

0.006EPSS

2020-01-21 11:15 PM
526
4
cve
cve

CVE-2019-19956

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to...

7.5CVSS

7.5AI Score

0.004EPSS

2019-12-24 04:15 PM
398
4
cve
cve

CVE-2019-13920

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some parts of the web application are not protected against Cross Site Request Forgery (CSRF) attacks. The security vulnerability could be exploited by an attacker that is able to trigger requests of a...

4.3CVSS

4.7AI Score

0.001EPSS

2019-09-13 05:15 PM
232
cve
cve

CVE-2019-13922

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). An attacker with administrative privileges can obtain the hash of a connected device's password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote...

2.7CVSS

4.5AI Score

0.001EPSS

2019-09-13 05:15 PM
237
cve
cve

CVE-2019-13919

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some pages that should only be accessible by a privileged user can also be accessed by a non-privileged user. The security vulnerability could be exploited by an attacker with network access and valid....

4.3CVSS

5AI Score

0.001EPSS

2019-09-13 05:15 PM
231
Total number of security vulnerabilities58