71 matches found
CVE-2021-40438
CVE-2021-40438 is an SSRF flaw in Apache HTTP Server 2.4.x through older revisions where a crafted request URI path can cause mod_proxy to forward the request to an origin server chosen by the remote user. The issue affects Apache httpd 2.4.48 and earlier; the CVSSv3.1 base score is 9.0 (CRITICAL...
CVE-2021-34798
CVE-2021-34798 is a vulnerability in Apache HTTP Server where malformed requests may cause a NULL pointer dereference in the httpd core. The issue affects Apache HTTP Server 2.4.48 and earlier, and the resulting crash can lead to a Denial of Service. Multiple connected advisories confirm the same...
CVE-2022-25235
CVE-2022-25235: In Expat (libexpat) xmltok_impl.c, there is insufficient validation of encoding (e.g., UTF-8 validity in certain contexts) prior to version 2.4.5. PUBLICLY documented impact is high/critical: CVSS 3.1 vector shows NETWORK attack, U/N UI, with C/H/I/H and a base score of 9.8. The c...
CVE-2022-25236
CVE-2022-25236 (Expat/libexpat) affects Expat before 2.4.5, where attackers can insert namespace-separator characters into namespace URIs in xmlparse.c. The issue can enable attacker-controlled input to trigger a denial of service or, in certain contexts (e.g., misuse of xmlns[:prefix] attribute ...
CVE-2020-7595
CVE-2020-7595 affects libxml2, specifically the xmlStringLenDecodeEntities function in parser.c of version 2.9.10, which can enter an infinite loop in certain end-of-file situations. Several connected advisories (e.g., ASA-202011-15) corroborate the issue and describe the impact as potential deni...
CVE-2022-25315
CVE-2022-25315 affects libexpat (Expat) with an integer overflow in storeRawNames in versions before 2.4.5. Public sources (e.g., AlmaLinux ALAS2-2022-1779, AlmaLinux ALSA-2022-7811, CentOS/Red Hat advisories) indicate the issue has been addressed in later expat releases (upgrades to 2.4.5+; 2.4....
CVE-2022-23852
Expat (libexpat) contains a signed integer overflow in XML_GetBuffer when XML_CONTEXT_BYTES is nonzero (CVE-2022-23852). IV was observed in multiple advisories and bulletins; the issue can lead to arbitrary code execution or crash if exploited. A fix exists in expat 2.4.4 and later; affected dist...
CVE-2021-22925
CVE-2021-22925 affects curl/libcurl’s TELNET OPTION handling (-t / CURLOPT_TELNETOPTIONS). A flaw in the option parser for NEW_ENV variables can cause uninitialized data from a stack buffer to be sent to the server, due to incorrect sscanf usage when parsing the provided string. This could reveal...
CVE-2022-23990
CVE-2022-23990 affects Expat (libexpat) before 2.4.4. The issue is an integer overflow in doProlog, leading to denial of service and potential exploitation. Advisories from AlmaLinux and Amazon Linux indicate remediation via upgrading expat to a fixed version (e.g., Expats newer than 2.4.4; ALAS ...
CVE-2019-19956
Summary (CVE-2019-19956) libxml2 before 2.9.10 contains a memory leak in xmlParseBalancedChunkMemoryRecover (parser.c) related to newDoc->oldNs. This can lead to memory not being freed (partial impact noted) and, per mapped references, contributes to DoS scenarios. The CVSS data across sources...
CVE-2021-22924
CVE-2021-22924 — libcurl connection reuse flaw : The issue arises when libcurl reuses connections from its pool without correctly accounting for the issuer certificate and with path comparisons that are case-insensitive. This can cause a transfer to use the wrong, previously opened connection. Pu...
CVE-2022-22822
CVE-2022-22822 affects Expat (libexpat) prior to 2.4.3, where addBinding in xmlparse.c can overflow an integer and enable remote code execution or other impact as described in published advisories. The vulnerability is tied to an integer overflow in xmlparse.c (addBinding), with CVSS-derived seve...
CVE-2021-45960
CVE-2021-45960 (Expat/libexpat) is corroborated by connected advisories describing a left shift (29 or more) in storeAtts() of xmlparse.c that can trigger realloc misbehavior, potentially leading to allocation errors or memory mismanagement in Expat before 2.4.3. The CVE is repeatedly listed acro...
CVE-2022-25314
CVE-2022-25314 affects Expat (libexpat) and is caused by an integer overflow in copyString() in xmlparse.c. The issue can enable arbitrary code execution or crash the process when processing crafted input. Public advisories and bulletins from AlmaLinux, AlmaLinux 9/8, Astra Linux, Cloud Foundry, ...
CVE-2022-22823
CVE-2022-22823 affects Expat (libexpat) with an integer overflow in build_model() in xmlparse.c, vulnerable prior to 2.4.3. The CVE is corroborated by multiple sources (e.g., ALAS2-2022-1809, ALSA-2022-7692) and Cloud Foundry USN references, all indicating Expat pre-2.4.3 contains the overflow is...
CVE-2022-22824
CVE-2022-22824 affects Expat (libexpat) with an integer overflow in defineAttribute() within xmlparse.c for versions before 2.4.3. The issue is confirmed by connected documents listing multiple Expat CVEs (e.g., CVE-2021-46143, CVE-2022-22822–22827) and advisories referencing 2.4.3 as the fix ver...
CVE-2022-22827
CVE-2022-22827 affects Expat (libexpat) stored in xmlparse.c: storeAtts has an integer overflow in versions before 2.4.3. The vulnerability can be triggered by processing crafted XML content and, as described in the advisories, may lead to crashes or arbitrary code execution in some contexts. Aff...
CVE-2022-22825
CVE-2022-22825 refers to an integer overflow in Expat (libexpat) within xmlparse.c (lookup function) present in versions before 2.4.3. The vulnerability is a code execution/impact class due to heap memory mismanagement from the overflow, with CVSS v3.1 base score 8.8 (high) and network/remote exp...
CVE-2021-46143
CVE-2021-46143 affects libexpat (Expat) in doProlog (xmlparse.c) with an integer overflow on m_groupSize prior to 2.4.3. The linked advisories and databases confirm related Expat overflow issues (and other overflow variants such as addBinding, build_model, defineAttribute, lookup, nextScaffoldPar...
CVE-2022-22826
CVE-2022-22826 is an integer overflow in the Expat (libexpat) XML parser, specifically in nextScaffoldPart of xmlparse.c, affecting versions before 2.4.3. The initial CVE description confirms the overflow, and connected advisories/patch notes (e.g., AlmaLinux ALAS-2022-1603/7692, CESA-2022:1069) ...
CVE-2022-25313
CVE-2022-25313 concerns the Expat/libexpat XML parser. The vulnerability arises from a stack-exhaustion condition triggered by a large nesting depth in the DTD element during build_model processing, allowing an attacker to cause a denial of service. Public advisories in connected docs confirm Exp...
CVE-2019-13920
Siemens SINEMA Remote Connect Server, pre-2.0 SP1, has a Cross‑Site Request Forgery (CSRF) vulnerability in the web interface that could allow an attacker to trigger requests from a logged‑in user and switch the connectivity state of a user or device. Root cause: CSRF in the web application (CVE-...
CVE-2019-13922
Siemens SINEMA Remote Connect Server (all versions
CVE-2019-13918
The CVE-2019-13918 issue affects Siemens SINEMA Remote Connect Server (all versions
CVE-2019-13919
Siemens SINEMA Remote Connect Server (all versions
CVE-2021-41991
Overview: CVE-2021-41991 affects strongSwan prior to 5.9.4, where an in-memory certificate cache can overflow after numerous requests with different certificates. The cache replacement uses a (faulty) random selection, allowing an integer overflow that can lead to a double-dereference and out-of-...
CVE-2021-20093
CVE-2021-20093 affects Wibu-Systems CodeMeter Runtime (CodeMeter, CmWAN/CodeMeter Network Server) prior to v7.21a. The issue is a buffer over-read (CWE-126) in the CodeMeter Runtime network server that can be exploited by an unauthenticated remote attacker to disclose heap memory contents or cras...
CVE-2022-23102
The CVE-2022-23102 entry affects SINEMA Remote Connect Server (all versions
CVE-2022-29034
Siemens SINEMA Remote Connect Server is affected for all versions prior to 3.1. The vulnerability is a reflected cross-site scripting (XSS) flaw in the web interface where an error message popup window does not prevent JavaScript injection. Under CVSS3.1, base score 6.1 (NETWORK, LOW attack compl...
CVE-2022-32259
CVE-2022-32259 affects Siemens SINEMA Remote Connect Server (all versions before v3.1). The root issue is that system images used for installation/update contain unit test scripts with sensitive information, enabling an attacker to gain information about the testing architecture and tamper with t...
CVE-2024-39873
Summary: CVE-2024-39873 affects Siemens SINEMA Remote Connect Server (all versions before V3.2 SP1). The security issue is a failure to properly implement brute-force protection on the web API authentication, which could allow an attacker to learn user credentials vulnerable to brute force attack...
CVE-2022-32251
CVE-2022-32251 affects Siemens SINEMA Remote Connect Server (all versions prior to v3.1). The vulnerability arises from missing authentication verification for a resource used to change user roles/permissions, enabling an attacker to modify privileges and potentially obtain administrative access....
CVE-2022-32255
Siemens SINEMA Remote Connect Server (all versions
CVE-2022-27221
CVE-2022-27221 – Siemens SINEMA Remote Connect Server is a BREACH-style encryption leakage vulnerability affecting all versions before 3.1. The issue arises in the way an attacker in a man-in-the-middle could observe length differences in a sequence of guesses to infer plaintext secret values fro...
CVE-2022-32257
Siemens SINEMA Remote Connect Server (all versions before V3.2) is affected by an improper access-control vulnerability in the web service endpoints, enabling unauthorized access and potentially remote code execution. Affected product: SINEMA Remote Connect Server; affected versions: prior to V3....
CVE-2022-32256
Siemens SINEMA Remote Connect Server is affected (all versions before V3.1) by an access-control vulnerability in the web service that could let low-privilege users access privileged information. Root cause: insufficient access control on certain endpoints. Impact per sources: information disclos...
CVE-2022-32254
CVE-2022-32254 affects Siemens SINEMA Remote Connect Server (all versions
CVE-2022-32260
CVE-2022-32260 affects Siemens SINEMA Remote Connect Server: all versions prior to 3.2 SP1 create temporary UMC user credentials, which could allow authentication bypass in certain scenarios. The affected component is the User Management Component (UMC) within SINEMA Remote Connect Server. Impact...
CVE-2022-27220
Siemens SINEMA Remote Connect Server (all versions
CVE-2022-32252
CVE-2022-32252 affects Siemens SINEMA Remote Connect Server (all versions
CVE-2022-32262
The CVE-2022-32262 issue affects Siemens SINEMA Remote Connect Server (all versions prior to 3.1). The vulnerability arises from a file upload server that is vulnerable to command injection, enabling arbitrary code execution. Impact is high, with remote exploitation possible and no authentication...
CVE-2022-32253
Siemens SINEMA Remote Connect Server (all versions
CVE-2022-32261
CVE-2022-32261 affects Siemens SINEMA Remote Connect Server (all versions prior to V3.1). The vulnerability stems from a misconfiguration in the APT update mechanism that could allow an attacker to add insecure update packages to the application. The issue is documented across multiple sources an...
CVE-2024-39872
Siemens SINEMA Remote Connect Server (all versions
CVE-2022-27219
Siemens SINEMA Remote Connect Server (all versions
CVE-2022-32258
The Siemens SINEMA Remote Connect Server (all versions before v3.1) contains a legacy feature that allows importing device configurations via a dedicated endpoint, which could be leveraged to disclose information. The underlying issue is the presence of this endpoint-enabled import functionality ...
CVE-2020-25240
CVE-2020-25240 affects SINEMA Remote Connect Server (all versions
CVE-2021-37177
The CVE-2021-37177 entry affects Siemens SINEMA Remote Connect Server (all versions before 3.0 SP2). The vulnerability allows an unauthenticated attacker on the same network to manipulate the status provided by managed syslog clients, indicating a modification of assumed-immutable data (CWE-471) ...
CVE-2024-39866
CVE-2024-39866 affects Siemens SINEMA Remote Connect Server (all versions prior to V3.2 SP1). The vulnerability is caused by privilege-related flaws in the backup-upload workflow: if an attacker can access the backup encryption key and upload backups, they can create a user with administrative pr...