Vulnerabilidades de Siemens
CVEs publicadas que afetam produtos de Siemens: 310 registro(s), com severidade, exploração e correções.
Sinec Infrastructure Network Services 38Sinema Remote Connect Server 22Solid Edge Se2025 16Simcenter Femap 15SIMATIC S7-PLCSIM Advanced 14SIMATIC S7-1500 CPU 1515F-2 PN 14SIMATIC ET 200SP CPU 1512SP-1 PN 14SIMATIC S7-1500 CPU 1513-1 PN 14SIMATIC S7-1500 CPU 1511F-1 PN 14SIMATIC S7-1500 CPU 1516F-3 PN/DP 14SIMATIC ET 200SP CPU 1512SP F-1 PN 14SIMATIC S7-1500 CPU 1516-3 PN/DP 14SIMATIC ET 200SP CPU 1510SP F-1 PN 14SIMATIC S7-1500 CPU 1511-1 PN 14SIMATIC ET 200SP CPU 1510SP-1 PN 14SIMATIC S7-1500 CPU 1515-2 PN 14Ruggedcom Ape1808 Firmware 13SIPLUS S7-1500 CPU 1516F-3 PN/DP 13SIPLUS S7-1500 CPU 1516-3 PN/DP 13SIPLUS S7-1500 CPU 1513F-1 PN 13SIPLUS ET 200SP CPU 1512SP F-1 PN 13SIMATIC S7-1500 CPU 1513F-1 PN 13SIPLUS S7-1500 CPU 1513-1 PN 13SIPLUS S7-1500 CPU 1511-1 PN 13SIPLUS S7-1500 CPU 1511F-1 PN 13SIMATIC S7-1500 Software Controller CPU 1508S V2 12SIMATIC S7-1500 Software Controller CPU 1508S T V3 12SIPLUS ET 200SP CPU 1512SP-1 PN 12SIMATIC ET 200SP CPU 1514SPT F-2 PN 12SIMATIC S7-1500 Software Controller CPU 1507S V2 12SIMATIC S7-1500 Software Controller CPU 1508S V4 12Sinec Ins 12SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 12SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 12SIMATIC S7-1500 CPU 1518T-3 PN 12SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN 12SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK 12SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN 12SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) 12SIMATIC S7-1500 CPU 1516pro-2 PN 12
CVE-2020-13632
Média · 5.5
CWE-476 27/05/2020
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted...
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
CVE-2020-13631
Média · 5.5
27/05/2020
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables...
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
CVE-2020-13630
Alta · 7.0
CWE-416 27/05/2020
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the...
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
CVE-2020-12762
Alta · 7.8
CWE-190 09/05/2020
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as...
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
CVE-2020-11656
Crítica · 9.8
CWE-416 09/04/2020
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by...
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
CVE-2020-11655
Alta · 7.5
CWE-665 09/04/2020
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
CVE-2020-9327
Alta · 7.5
CWE-476 21/02/2020
In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference...
In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.
CVE-2020-7595
Alta · 7.5
CWE-835 21/01/2020
libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
CVE-2019-19925
Alta · 7.5
CWE-434 24/12/2019
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update...
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
CVE-2019-19956
Alta · 7.5
CWE-401 24/12/2019
xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...
xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.
CVE-2019-19924
Média · 5.3
CWE-755 24/12/2019
SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window...
SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.
CVE-2019-19923
Alta · 7.5
CWE-476 24/12/2019
flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving...
flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).
CVE-2019-19926
Alta · 7.5
CWE-476 22/12/2019
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as...
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
CVE-2019-19880
Alta · 7.5
CWE-476 18/12/2019
exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer...
exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.
CVE-2019-19646
Crítica · 9.8
CWE-754 09/12/2019
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in...
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.
CVE-2019-19603
Alta · 7.5
09/12/2019
SQLite 3.30.1, during handling of CREATE TABLE and CREATE VIEW statements, does not consider...
SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.
CVE-2019-19645
Média · 5.5
CWE-674 09/12/2019
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types...
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.
CVE-2019-19317
Crítica · 9.8
CWE-681 05/12/2019
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a...
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
CVE-2019-19242
Média · 5.9
CWE-476 27/11/2019
SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in...
SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.
CVE-2019-19244
Alta · 7.5
25/11/2019
sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and...
sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.
CVE-2019-16905
Alta · 7.8
CWE-190 09/10/2019
OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a...
OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.
CVE-2019-0708
Crítica · 9.8
KEV Urgente · 93 Exploit público Ransomware CWE-416 16/05/2019
Microsoft Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
CVE-2019-6111
Média · 5.9
Exploit público CWE-22 31/01/2019
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).
CVE-2019-6110
Média · 6.8
Exploit público CWE-838 31/01/2019
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a...
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
CVE-2019-6109
Média · 6.8
CWE-116 31/01/2019
An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...
An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.