Vulnerabilities > Siemens
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-12-14 | CVE-2019-19286 | SQL Injection vulnerability in Siemens XHQ 6.0.0.0/6.0.0.2 A vulnerability has been identified in XHQ (All Versions < 6.1). | 6.5 |
| 2020-12-14 | CVE-2019-19285 | Cross-site Scripting vulnerability in Siemens XHQ 6.0.0.0/6.0.0.2 A vulnerability has been identified in XHQ (All Versions < 6.1). | 3.5 |
| 2020-12-14 | CVE-2019-19284 | Cross-site Scripting vulnerability in Siemens XHQ 6.0.0.0/6.0.0.2 A vulnerability has been identified in XHQ (All Versions < 6.1). | 3.5 |
| 2020-12-14 | CVE-2019-19283 | Information Exposure vulnerability in Siemens XHQ 6.0.0.0/6.0.0.2 A vulnerability has been identified in XHQ (All Versions < 6.1). | 5.0 |
| 2020-12-14 | CVE-2020-8286 | Improper Certificate Validation vulnerability in multiple products curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. | 7.5 |
| 2020-12-14 | CVE-2020-8285 | Uncontrolled Recursion vulnerability in multiple products curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. | 7.5 |
| 2020-12-14 | CVE-2020-8284 | A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. | 3.7 |
| 2020-12-14 | CVE-2020-8231 | Use After Free vulnerability in multiple products Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data. | 7.5 |
| 2020-12-14 | CVE-2020-8177 | Injection vulnerability in multiple products curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used. | 7.8 |
| 2020-12-14 | CVE-2020-8169 | Information Exposure vulnerability in multiple products curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s). | 7.5 |