Aller au contenu

Vulnérabilités connues pour Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2022-40304 An issue was discovered in libxml2 before 2.10.3 7.8 Élevée 23 nov. 2022
CVE-2022-40303 An issue was discovered in libxml2 before 2.10.3 7.5 Élevée 22 nov. 2022
CVE-2022-45061 An issue was discovered in Python before 3.11.1 7.5 Élevée 9 nov. 2022
CVE-2022-3821 An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c 5.5 Moyenne 8 nov. 2022
CVE-2022-30694 The login endpoint /FormLogin in affected web services does not apply proper origin checking 6.5 Moyenne 8 nov. 2022
CVE-2022-42916 In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP 7.5 Élevée 29 oct. 2022
CVE-2022-42915 curl before 7.86.0 has a double free 8.1 Élevée 29 oct. 2022
CVE-2022-43680 In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in… 7.5 Élevée 24 oct. 2022
CVE-2021-46848 GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der 9.1 Critique 24 oct. 2022
CVE-2022-37454 The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that… 9.8 Critique 21 oct. 2022
CVE-2022-35252 When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when… 3.7 Faible 23 sept. 2022
CVE-2022-28321 The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins 9.8 Critique 19 sept. 2022
CVE-2022-40674 libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c 8.1 Élevée 14 sept. 2022
CVE-2020-10735 A flaw was found in python 6.2 Moyenne 9 sept. 2022
CVE-2021-3826 Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially… Non notée 1 sept. 2022
CVE-2020-35527 In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause Non notée 1 sept. 2022
CVE-2020-35525 In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing Non notée 1 sept. 2022
CVE-2022-1271 An arbitrary file write vulnerability was found in GNU gzip's zgrep utility 8.8 Élevée 31 août 2022
CVE-2021-4122 It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery… Non notée 24 août 2022
CVE-2021-4209 A NULL pointer dereference flaw was found in GnuTLS Non notée 24 août 2022
CVE-2021-4189 A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode 5.3 Moyenne 24 août 2022
CVE-2021-3998 A flaw was found in glibc 7.5 Élevée 24 août 2022
CVE-2021-3999 A flaw was found in glibc 7.8 Élevée 24 août 2022
CVE-2021-3997 A flaw was found in systemd Non notée 23 août 2022
CVE-2021-28861 Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against… 6.5 Moyenne 23 août 2022

Autres produits Siemens