TI-2026-34370 CVE-2026-46749 · GHSA-c5mx-3x5g-xmjx
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
Priority LOW 24
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
Vulnerabilities
43 records
TI-2026-34369 CVE-2026-46748 · GHSA-c23g-cgv4-p67j
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
Priority LOW 39
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
TI-2026-34368 CVE-2026-46747 · GHSA-wxmp-hwgx-g5h8
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
Priority LOW 24
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
TI-2026-34367 CVE-2026-46746 · GHSA-vxxj-9x7w-4356
OS command injection in Siemens SINEC INS
Priority MEDIUM 40
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
TI-2024-31306 CVE-2024-46894 · GHSA-mx5f-vqxg-86w4
Information disclosure in Siemens SINEC INS
Priority LOW 30
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).
TI-2024-31305 CVE-2024-46892 · GHSA-76f5-r74w-9h63
Insufficient session expiration in Siemens SINEC INS
Priority LOW 30
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).
TI-2024-31304 CVE-2024-46891 · GHSA-775q-3335-qhjr
Uncontrolled resource consumption in Siemens SINEC INS
Priority LOW 37
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).
TI-2024-31303 CVE-2024-46890 · GHSA-gh66-hfff-5mf9
OS command injection in Siemens SINEC INS
Priority MEDIUM 42
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).
TI-2024-31302 CVE-2024-46889 · GHSA-qhpc-32r3-qpcv
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).
Priority LOW 36
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).
TI-2024-31301 CVE-2024-46888 · GHSA-qf2g-86hc-xp38
Path traversal in Siemens SINEC INS
Priority MEDIUM 42
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).
TI-2024-02335 CVE-2024-2511 · GHSA-299c-jvhc-gxj8
Unbounded memory growth with session handling in TLSv1.3
Priority MEDIUM 61
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memo…
TI-2023-26285 CVE-2023-48431 · GHSA-gv5r-5x6r-p8j8
Improper check for unusual conditions in Siemens SINEC INS
Priority LOW 38
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2).
TI-2023-26284 CVE-2023-48430 · GHSA-r7vh-7qjc-wcjc
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2).
Priority LOW 14
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2).
TI-2023-26283 CVE-2023-48429 · GHSA-hf2c-2hx8-m89f
Improper check for unusual conditions in Siemens SINEC INS
Priority LOW 14
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2).
TI-2023-26282 CVE-2023-48428 · GHSA-3727-x5w3-xwrr
OS command injection in Siemens SINEC INS
Priority LOW 34
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2).
TI-2023-26281 CVE-2023-48427 · GHSA-ffrg-8pgr-8693
Improper certificate validation in Siemens SINEC INS
Priority MEDIUM 43
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2).
TI-2023-23979 CVE-2023-44487 · GHSA-qppj-fm5r-hxr3
The HTTP/2 protocol allows a denial of service (server resource consumption) because…
Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
TI-2022-22183 CVE-2022-45094 · GHSA-q9cw-p99m-h9cm
Command injection in Siemens SINEC INS
Priority MEDIUM 43
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1).
TI-2022-22182 CVE-2022-45093 · GHSA-7qfq-9585-7jw2
Path traversal in Siemens SINEC INS
Priority MEDIUM 43
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1).
TI-2022-22181 CVE-2022-45092 · GHSA-jpc4-x6x2-7pm8
Path traversal in Siemens SINEC INS
Priority HIGH 67
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1).
TI-2022-15935 CVE-2022-35256 · GHSA-rc2m-q589-vpqx
The llhttp parser in the http module in Node v18.7.0 does not correctly handle header…
Priority HIGH 68
The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF.
TI-2022-15934 CVE-2022-35255 · GHSA-p36x-w6hr-88jp
A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change…
Priority MEDIUM 51
A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() in SecretKeyGenTraits::DoKeyGen() in src/crypto/crypto_keygen.cc.
TI-2022-13931 CVE-2022-32222 · GHSA-fxfc-w6xq-5pp8
Cryptographic flaw in NodeJS Node
Priority LOW 28
A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0 which allowed a default path for openssl.cnf that might be accessible under some circumstances to a non-admin user instead of…
TI-2022-13925 CVE-2022-32215 · GHSA-5492-mr68-4m2h
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does…
Priority HIGH 66
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers.
TI-2022-13923 CVE-2022-32213 · GHSA-5689-v88g-g6rv
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does…
Priority MEDIUM 58
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling (HRS).