CVE-2019-3822

CVE-2019-3822 affects libcurl 7.36.0 through before 7.64.0. The vulnerability is a stack-based buffer overflow in the NTLM header creation path: Curl_auth_create_ntlm_type3_message() uses unsigned arithmetic to guard a local buffer, but the check is insufficient, allowing the output data to excee...

CVE-2018-16890

CVE-2018-16890 affects libcurl versions 7.36.0 to before 7.64.0. The NTLM type-2 handling path (lib/vauth/ntlm.c:ntlm_decode_type2_target) fails to validate incoming data, enabling an integer overflow that an attacker could abuse to trigger a heap read out-of-bounds. Related issues in the same se...

CVE-2024-22045

CVE-2024-22045 concerns Siemens SINEMA Remote Connect Client. Affected: all versions prior to V3.1 SP1. Issue: insertion of sensitive information into files/directories that are externally accessible and also exposed via the product’s web interface, impacting confidentiality. Public documents con...

CVE-2024-39568

Siemens SINEMA Remote Connect Client is affected: all versions prior to V3.2 HF1 are vulnerable to command injection due to missing server-side input sanitation when loading proxy configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges thr...

CVE-2024-32006

CVE-2024-32006 affects SINEMA Remote Connect Client (all versions prior to V3.2 SP2). The vulnerability arises because the client does not expire the user session on reboot without logout, which could allow bypass of Multi-Factor Authentication. The CVSS context from NVD/Red Hat/NCSC indicates cr...

CVE-2024-39567

The CVE-2024-39567 issue affects SINEMA Remote Connect Client (versions prior to V3.2 HF1). The vulnerability is a command-injection flaw in the system service caused by missing server-side input sanitation when loading VPN configurations, allowing an authenticated local attacker to execute arbit...

CVE-2024-39569

CVE-2024-39569 affects Siemens SINEMA Remote Connect Client (all versions

CVE-2024-42344

The CVE-2024-42344 vulnerability affects Siemens SINEMA Remote Connect Client (versions prior to 3.2 SP2). The issue is that the application writes sensitive information into a log file accessible to all legitimate users on the system, potentially exposing other users’ configuration data and impa...