Latest CVE Feed
-
9.8
CRITICALCVE-2017-9939
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with network access to the SiPass integrated server to bypass the authentication mechanism and perform administrative operations.... Read more
Affected Products : sipass_integrated- Published: Aug. 08, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2017-9938
A vulnerability was discovered in Siemens SIMATIC Logon (All versions before V1.6) that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts au... Read more
Affected Products : simatic_logon- Published: Aug. 08, 2017
- Modified: Apr. 20, 2025
-
7.4
HIGHCVE-2017-6873
A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack on the integrated web server on port 443/... Read more
- Published: Aug. 08, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-6872
A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker with access to port 21/tcp to access or alter historical measurement data stored on the device.... Read more
- Published: Aug. 08, 2017
- Modified: Apr. 20, 2025
-
5.4
MEDIUMCVE-2017-6871
A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical access to an unlocked mobile device, th... Read more
- Published: Aug. 08, 2017
- Modified: Apr. 20, 2025
-
7.4
HIGHCVE-2017-6870
A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Mid... Read more
Affected Products : simatic_wincc_sm\@rtclient- Published: Aug. 08, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2017-6869
A vulnerability was discovered in Siemens ViewPort for Web Office Portal before revision number 1453 that could allow an unauthenticated remote user to upload arbitrary code and execute it with the permissions of the operating-system user running the web ... Read more
Affected Products : viewport_for_web_office_portal- Published: Aug. 08, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-6866
A vulnerability was discovered in Siemens XHQ server 4 and 5 (4 before V4.7.1.3 and 5 before V5.0.0.2) that could allow an authenticated low-privileged remote user to gain read access to data in the XHQ solution exceeding his configured permission level.... Read more
Affected Products : xhq_server- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-12676
In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-12675
In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to cause a denial of service.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-12674
In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-12673
In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-12672
In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-12671
In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows attackers to cause a denial of service.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-12670
In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/image.c, which allows attackers to cause a denial of service.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-12669
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-12668
ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-12667
ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders\mat.c.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-12666
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-12665
ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025