CVE-2014-0160

CVE-2014-0160 (Heartbleed) is an information-disclosure vulnerability in OpenSSL’s TLS/DTLS heartbeat implementation. Affected: OpenSSL 1.0.1 before 1.0.1g. Root cause: improper handling of the Heartbeat extension (d1_both.c, t1_lib.c) leading to a buffer over-read, enabling an attacker to read m...

CVE-2022-33139

Summary: CVE-2022-33139 affects Cerberus DMS, Desigo CC/CC Compact, and SIMATIC WinCC OA (V3.16–V3.18) when only client-side authentication is used and neither server-side authentication (SSA) nor Kerberos is enabled. In this configuration, attackers could impersonate other users or exploit the c...