Aller au contenu

Vulnérabilités de Siemens SINEC NMS

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-28182 nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C 5.3 Moyenne 4 avr. 2024
CVE-2024-2466 libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to… 6.5 Moyenne 27 mars 2024
CVE-2024-2379 libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL 6.3 Moyenne 27 mars 2024
CVE-2024-2398 When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the… 8.6 Élevée 27 mars 2024
CVE-2024-2004 When a protocol selection parameter option disables all protocols without adding any then the default set of protocols… 3.5 Faible 27 mars 2024
CVE-2024-28757 libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via… 7.5 Élevée 10 mars 2024
CVE-2024-23812 A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1) 8.0 Élevée 13 févr. 2024
CVE-2024-23811 A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1) 8.8 Élevée 13 févr. 2024
CVE-2024-23810 A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1) 8.8 Élevée 13 févr. 2024
CVE-2024-25062 An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5 7.5 Élevée 4 févr. 2024
CVE-2023-52426 libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time 5.5 Moyenne 4 févr. 2024
CVE-2023-52425 libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in… 7.5 Élevée 4 févr. 2024
CVE-2024-0727 Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of… Non notée 26 janv. 2024
CVE-2023-6129 Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the… Non notée 9 janv. 2024
CVE-2023-46285 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All… 7.5 Élevée 12 déc. 2023
CVE-2023-46284 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All… 7.5 Élevée 12 déc. 2023
CVE-2023-46283 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All… 7.5 Élevée 12 déc. 2023
CVE-2023-46282 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All… 7.1 Élevée 12 déc. 2023
CVE-2023-46281 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All… 7.1 Élevée 12 déc. 2023
CVE-2023-46219 When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent… 5.3 Moyenne 12 déc. 2023
CVE-2023-46218 This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than… 6.5 Moyenne 7 déc. 2023
CVE-2023-5678 Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be… Non notée 6 nov. 2023
CVE-2023-5363 Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths Non notée 24 oct. 2023
CVE-2023-44315 A vulnerability has been identified in SINEC NMS (All versions < V2.0) 4.7 Moyenne 10 oct. 2023
CVE-2022-30527 A vulnerability has been identified in SINEC NMS (All versions < V2.0) 7.8 Élevée 10 oct. 2023

Autres produits Siemens