All Posts by: Virtual Patching

Siemens SINEC NMS up to 1.0 HTTP Request path traversal

A vulnerability was found in Siemens SINEC NMS up to 1.0. It has been declared as problematic. This vulnerability affects

Common Vulnerabilities and Exposures

Siemens NX 1980 prior 1984 IFC Adapter use after free

A vulnerability was found in Siemens NX 1980. It has been rated as critical. This issue affects an unknown part

Common Vulnerabilities and Exposures

Siemens NX 1980 prior 1984 IFC File plmxmlAdapterIFC.dll out-of-bounds read

A vulnerability classified as critical has been found in Siemens NX 1980. Affected is an unknown code in the library

Common Vulnerabilities and Exposures

Siemens Teamcenter prior 12.4.0.8/13.0.0.7/13.1.0.5/13.2.0.2 surrogate access control

A vulnerability classified as critical was found in Siemens Teamcenter. Affected by this vulnerability is an unknown code block of

Common Vulnerabilities and Exposures

Siemens Teamcenter prior 12.4.0.8/13.0.0.7/13.1.0.5/13.2.0.2 Object Reference authorization

A vulnerability, which was classified as critical, has been found in Siemens Teamcenter. Affected by this issue is some unknown

Common Vulnerabilities and Exposures

Siemens Teamcenter Active Workspace prior 4.3.10/5.0.8/5.1.5/5.2.1 path traversal

A vulnerability, which was classified as critical, was found in Siemens Teamcenter Active Workspace. This affects an unknown function. Upgrading

Common Vulnerabilities and Exposures

Siemens Cerberus DMS/Desigo CC Compact/Desigo CC CCOM Communication deserialization

A vulnerability has been found in Siemens Cerberus DMS, Desigo CC Compact and Desigo CC (the affected version is unknown)

Common Vulnerabilities and Exposures

Siemens Teamcenter xml external entity reference [CVE-2021-40356]

A vulnerability was found in Siemens Teamcenter (unknown version) and classified as problematic. This issue affects some unknown functionality. Upgrading

Common Vulnerabilities and Exposures

Siemens SINEC NMS up to 1.0 Configuration cross-site request forgery

A vulnerability was found in Siemens SINEC NMS up to 1.0. It has been classified as problematic. Affected is an

Common Vulnerabilities and Exposures

Siemens Desigo CC HTTP GET Request os command injection [CVE-2021-31891]

A vulnerability has been found in Siemens Desigo CC, GMA-Manager, Operation Scheduler, Siveillance Control and Siveillance Control Pro and classified

Common Vulnerabilities and Exposures

Siemens APOGEE MBC Web Server Host buffer overflow

A vulnerability was found in Siemens APOGEE MBC, APOGEE MEC, APOGEE PXC Compact, APOGEE PXC Modular, TALON TC Compact and

Common Vulnerabilities and Exposures

Siemens SIPROTEC 5 up to 8.79 Service Port 4443 buffer overflow

A vulnerability was found in Siemens SIPROTEC 5 up to 8.79. It has been classified as critical. This affects an

Common Vulnerabilities and Exposures

Siemens RUGGEDCOM ROX RX5000 up to 2.14.0 unnecessary privileges

A vulnerability was found in Siemens RUGGEDCOM ROX MX5000, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX

Common Vulnerabilities and Exposures

Siemens SINEMA Remote Connect Server up to 3.0 SP1 VPN Connection information disclosure

A vulnerability was found in Siemens SINEMA Remote Connect Server up to 3.0 SP1. It has been rated as problematic.

Common Vulnerabilities and Exposures

Siemens SINEMA Remote Connect Server up to 3.0 SP1 excessive authentication

A vulnerability classified as problematic has been found in Siemens SINEMA Remote Connect Server up to 3.0 SP1. Affected is

Common Vulnerabilities and Exposures

Siemens SINEMA Remote Connect Server up to 3.0 SP1 information disclosure

A vulnerability classified as problematic was found in Siemens SINEMA Remote Connect Server up to 3.0 SP1. Affected by this

Common Vulnerabilities and Exposures

Siemens SIPROTEC 5 up to 8.79 Web Packet denial of service

A vulnerability, which was classified as problematic, has been found in Siemens SIPROTEC 5 up to 8.79. Affected by this

Common Vulnerabilities and Exposures

Siemens SIMATIC CP 343-1 Service Port 102 memory corruption [CVE-2021-33737]

A vulnerability, which was classified as critical, was found in Siemens SIMATIC CP 343-1, SIMATIC CP 343-1 Advanced, SIMATIC CP

Common Vulnerabilities and Exposures

Atlassian JIRA Server/Data Center up to 8.18.x Endpoint /rest/api/1.0/render information disclosure

A vulnerability was found in Atlassian JIRA Server and Data Center up to 8.18.x (Bug Tracking Software). It has been

Common Vulnerabilities and Exposures

Atlassian JIRA Server/Data Center up to 8.5.9/8.13.0 Password Reset Page information disclosure

A vulnerability classified as problematic has been found in Atlassian JIRA Server and Data Center up to 8.5.9/8.13.0 (Bug Tracking

Common Vulnerabilities and Exposures

Atlassian JIRA Server/Data Center up to 8.13.2/8.14.0 Endpoint check access control

A vulnerability classified as critical was found in Atlassian JIRA Server and Data Center up to 8.13.2/8.14.0 (Bug Tracking Software).

Common Vulnerabilities and Exposures

Atlassian JIRA Server/Data Center up to 8.15.x Endpoint generate denial of service

A vulnerability, which was classified as problematic, has been found in Atlassian JIRA Server and Data Center up to 8.15.x

Common Vulnerabilities and Exposures

Atlassian JIRA Server/Data Center up to 8.15.x cross-site request forgery

A vulnerability, which was classified as problematic, was found in Atlassian JIRA Server and Data Center up to 8.15.x (Bug

Common Vulnerabilities and Exposures

atftp up to 0.7.4 Data tftpd_file.c buffer overflow

A vulnerability has been found in atftp up to 0.7.4 and classified as critical. This vulnerability affects an unknown function