Siemens vulnerabilities
Published CVEs affecting Siemens products: 316 record(s), with severity, exploitation and fixes.
Sinec Infrastructure Network Services 38Sinema Remote Connect Server 22Solid Edge Se2025 16Simcenter Femap 15SIMATIC S7-PLCSIM Advanced 14SIMATIC S7-1500 CPU 1515-2 PN 14SIMATIC ET 200SP CPU 1512SP F-1 PN 14SIMATIC S7-1500 CPU 1516-3 PN/DP 14SIMATIC ET 200SP CPU 1510SP-1 PN 14SIMATIC S7-1500 CPU 1513-1 PN 14SIMATIC S7-1500 CPU 1511F-1 PN 14SIMATIC S7-1500 CPU 1515F-2 PN 14SIMATIC ET 200SP CPU 1512SP-1 PN 14SIMATIC S7-1500 CPU 1511-1 PN 14SIMATIC ET 200SP CPU 1510SP F-1 PN 14SIMATIC S7-1500 CPU 1516F-3 PN/DP 14Ruggedcom Ape1808 Firmware 13SIPLUS S7-1500 CPU 1516F-3 PN/DP 13SIPLUS S7-1500 CPU 1516-3 PN/DP 13SIPLUS S7-1500 CPU 1513F-1 PN 13SIPLUS ET 200SP CPU 1512SP F-1 PN 13SIPLUS S7-1500 CPU 1513-1 PN 13SIPLUS S7-1500 CPU 1511-1 PN 13SIPLUS S7-1500 CPU 1511F-1 PN 13SIMATIC S7-1500 CPU 1513F-1 PN 13SIMATIC S7-1500 Software Controller CPU 1508S V2 12SIMATIC S7-1500 Software Controller CPU 1508S F V4 12SIPLUS ET 200SP CPU 1512SP-1 PN 12SIMATIC ET 200SP CPU 1514SP-2 PN 12SIMATIC S7-1500 Software Controller CPU 1507S F V3 12SIMATIC S7-1500 Software Controller CPU 1508S V3 12Sinec Ins 12SIMATIC S7-1500 CPU 1518F-4 PN/DP 12SIMATIC S7-1500 CPU 1518-4 PN/DP 12SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 12SIMATIC S7-1500 Software Controller CPU 1508S TF V3 12SIMATIC S7-1500 CPU 1518TF-4 PN/DP 12SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN 12SIMATIC ET 200SP CPU 1514SPT-2 PN 12SIMATIC S7-1500 CPU 1512C-1 PN 12
CVE-2020-8285
High · 7.5
CWE-674 Dec 14, 2020
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
CVE-2020-8284
Low · 3.7
CWE-200 Dec 14, 2020
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.
CVE-2020-8231
High · 7.5
CWE-416 Dec 14, 2020
Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...
Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.
CVE-2020-8169
High · 7.5
CWE-200 Dec 14, 2020
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
CVE-2020-15358
Medium · 5.5
CWE-787 Jun 27, 2020
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a...
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
CVE-2020-13871
High · 7.5
CWE-416 Jun 6, 2020
SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite...
SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
CVE-2020-13632
Medium · 5.5
CWE-476 May 27, 2020
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted...
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
CVE-2020-13631
Medium · 5.5
May 27, 2020
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables...
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
CVE-2020-13630
High · 7.0
CWE-416 May 27, 2020
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the...
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
CVE-2020-12762
High · 7.8
CWE-190 May 9, 2020
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as...
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
CVE-2020-11656
Critical · 9.8
CWE-416 Apr 9, 2020
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by...
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
CVE-2020-11655
High · 7.5
CWE-665 Apr 9, 2020
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
CVE-2020-9327
High · 7.5
CWE-476 Feb 21, 2020
In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference...
In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.
CVE-2020-7595
High · 7.5
CWE-835 Jan 21, 2020
libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
CVE-2019-19925
High · 7.5
CWE-434 Dec 24, 2019
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update...
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
CVE-2019-19956
High · 7.5
CWE-401 Dec 24, 2019
xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...
xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.
CVE-2019-19924
Medium · 5.3
CWE-755 Dec 24, 2019
SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window...
SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.
CVE-2019-19923
High · 7.5
CWE-476 Dec 24, 2019
flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving...
flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).
CVE-2019-19926
High · 7.5
CWE-476 Dec 22, 2019
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as...
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
CVE-2019-19880
High · 7.5
CWE-476 Dec 18, 2019
exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer...
exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.
CVE-2019-19646
Critical · 9.8
CWE-754 Dec 9, 2019
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in...
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.
CVE-2019-19603
High · 7.5
Dec 9, 2019
SQLite 3.30.1, during handling of CREATE TABLE and CREATE VIEW statements, does not consider...
SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.
CVE-2019-19645
Medium · 5.5
CWE-674 Dec 9, 2019
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types...
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.
CVE-2019-19317
Critical · 9.8
CWE-681 Dec 5, 2019
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a...
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
CVE-2019-19242
Medium · 5.9
CWE-476 Nov 27, 2019
SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in...
SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.