Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-49814 State: PUBLISHED Published: 2025-02-06T00:10:32.792Z Last Updated: 2025-02-22T22:08:16.852Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Verify Access Appliance Problem Types: CWE-250 Description: IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated user to increase their privileges due to execution with unnecessary privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7182558
CVE ID: CVE-2024-49816 State: PUBLISHED Published: 2024-12-17T17:42:55.387Z Last Updated: 2024-12-17T20:37:28.513Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-532 Description: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially sensitive information in log files that could be read by a local privileged user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7175067
CVE ID: CVE-2024-49817 State: PUBLISHED Published: 2024-12-17T17:34:11.065Z Last Updated: 2024-12-17T20:37:54.298Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-260 Description: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores user credentials in configuration files which can be read by a local privileged user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7175067
CVE ID: CVE-2024-49818 State: PUBLISHED Published: 2024-12-17T17:35:47.807Z Last Updated: 2024-12-17T20:37:49.263Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-209 Description: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7175067
CVE ID: CVE-2024-49819 State: PUBLISHED Published: 2024-12-17T17:41:27.693Z Last Updated: 2024-12-17T20:37:40.846Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-319 Description: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information in cleartext in a communication channel that can be sniffed by unauthorized actors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7175067
CVE ID: CVE-2024-49820 State: PUBLISHED Published: 2024-12-17T17:42:14.257Z Last Updated: 2024-12-17T20:37:34.046Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-319 Description: IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/p
in the middle techniques. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7175067
CVE ID: CVE-2024-49822 State: PUBLISHED Published: 2025-03-18T14:19:44.773Z Last Updated: 2025-09-01T01:04:44.637Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: IBM Products: QRadar Advisor with Watson Problem Types: CWE-918 Description: IBM QRadar Advisor 1.0.0 through 2.6.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7186424
CVE ID: CVE-2024-49823 State: PUBLISHED Published: 2025-03-11T00:48:05.380Z Last Updated: 2025-09-01T01:07:08.097Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Common Cryptographic Architecture, 4769 Developers Toolkit Problem Types: CWE-787 Description: IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an authenticated user to cause a denial of service in the Hardware Security Module (HSM) using a specially crafted sequence of valid requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7185282
CVE ID: CVE-2024-49824 State: PUBLISHED Published: 2025-01-18T15:11:58.522Z Last Updated: 2025-01-21T20:58:13.548Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Robotic Process Automation, Robotic Process Automation for Cloud Pak Problem Types: CWE-602 Description: IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation of client-side security enforcement. Additional Analyst Notes: - CISA ADP Vulnrichment
d user due to improper validation of client-side security enforcement. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7177587
CVE ID: CVE-2024-49825 State: PUBLISHED Published: 2025-04-14T14:53:40.800Z Last Updated: 2025-09-01T00:54:05.019Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: Robotic Process Automation, Robotic Process Automation for Cloud Pak Problem Types: CWE-613 Description: IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0 through 23.0.20 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7230848
CVE ID: CVE-2024-49827 State: PUBLISHED Published: 2025-08-18T13:43:51.852Z Last Updated: 2025-08-18T13:54:50.490Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Concert Software Problem Types: CWE-213 Description: IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to excessive data exposure, allowing attackers to access sensitive information without proper filtering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7242354
CVE ID: CVE-2024-49828 State: PUBLISHED Published: 2025-07-29T19:04:20.976Z Last Updated: 2025-08-17T01:23:37.630Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 Problem Types: CWE-121 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7240945
CVE ID: CVE-2024-49829 State: PUBLISHED Published: 2025-05-06T08:32:14.738Z Last Updated: 2025-05-07T03:55:37.794Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption can occur during context user dumps due to inadequate checks on buffer length. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
CVE ID: CVE-2024-49830 State: PUBLISHED Published: 2025-05-06T08:32:15.953Z Last Updated: 2025-05-07T03:55:36.483Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while processing an IOCTL call to set mixer controls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
CVE ID: CVE-2024-49832 State: PUBLISHED Published: 2025-02-03T16:51:33.100Z Last Updated: 2025-02-03T17:34:15.547Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption in Camera due to unusually high number of nodes passed to AXI port. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-49833 State: PUBLISHED Published: 2025-02-03T16:51:34.352Z Last Updated: 2025-02-03T17:33:51.381Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption can occur in the camera when an invalid CID is used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-49834 State: PUBLISHED Published: 2025-02-03T16:51:35.589Z Last Updated: 2025-02-03T17:33:28.546Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption while power-up or power-down sequence of the camera sensor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-49835 State: PUBLISHED Published: 2025-05-06T08:32:17.432Z Last Updated: 2025-05-07T03:55:35.116Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-787 Description: Memory corruption while reading secure file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
CVE ID: CVE-2024-49836 State: PUBLISHED Published: 2025-03-03T10:07:31.405Z Last Updated: 2025-03-05T04:55:15.846Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption may occur during the synchronization of the camera`s frame processing pipeline. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE ID: CVE-2024-49837 State: PUBLISHED Published: 2025-02-03T16:51:36.782Z Last Updated: 2025-02-28T06:09:11.076Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption while reading CPU state data during guest VM suspend. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-49838 State: PUBLISHED Published: 2025-02-03T16:51:37.966Z Last Updated: 2025-02-03T17:32:23.663Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure while parsing the OCI IE with invalid length. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-49839 State: PUBLISHED Published: 2025-02-03T16:51:39.200Z Last Updated: 2025-02-03T17:31:49.479Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Memory corruption during management frame processing due to mismatch in T2LM info element. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-49840 State: PUBLISHED Published: 2025-02-03T16:51:40.415Z Last Updated: 2025-02-03T17:31:20.955Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-49841 State: PUBLISHED Published: 2025-05-06T08:32:18.628Z Last Updated: 2025-05-07T18:54:32.715Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-390 Description: Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
CVE ID: CVE-2024-49842 State: PUBLISHED Published: 2025-05-06T08:32:19.898Z Last Updated: 2025-05-07T03:55:32.425Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-284 Description: Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
CVE ID: CVE-2024-49843 State: PUBLISHED Published: 2025-02-03T16:51:41.704Z Last Updated: 2025-02-03T17:30:49.354Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption while processing IOCTL from user space to handle GPU AHB bus error. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html
CVE ID: CVE-2024-49844 State: PUBLISHED Published: 2025-05-06T08:32:21.132Z Last Updated: 2025-05-07T03:55:31.089Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Memory corruption while triggering commands in the PlayReady Trusted application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
CVE ID: CVE-2024-49845 State: PUBLISHED Published: 2025-05-06T08:32:22.347Z Last Updated: 2025-05-07T03:55:29.745Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Memory corruption during the FRS UDS generation process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
CVE ID: CVE-2024-49846 State: PUBLISHED Published: 2025-05-06T08:32:23.580Z Last Updated: 2025-05-06T15:52:55.077Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Memory corruption while decoding of OTA messages from T3448 IE. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
CVE ID: CVE-2024-49847 State: PUBLISHED Published: 2025-05-06T08:32:24.772Z Last Updated: 2025-05-06T16:59:15.241Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
CVE ID: CVE-2024-49848 State: PUBLISHED Published: 2025-04-07T10:15:50.191Z Last Updated: 2025-04-08T03:56:13.620Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while processing multiple IOCTL calls from HLOS to DSP. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE ID: CVE-2024-49849 State: PUBLISHED Published: 2024-12-10T13:53:56.043Z Last Updated: 2025-08-12T11:16:44.114Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC S7-PLCSIM V16, SIMATIC S7-PLCSIM V17, SIMATIC STEP 7 Safety V16, SIMATIC STEP 7 Safety V17, SIMATIC STEP 7 Safety V18, SIMATIC STEP 7 Safety V19, SIMATIC STEP 7 V16, SIMATIC STEP 7 V17, SIMATIC STEP 7 V18, SIMATIC STEP 7 V19, SIMATIC WinCC Unified V16, SIMATIC WinCC Unified V17, SIMATIC WinCC Unified V18, SIMATIC WinCC Unified V19, SIMATIC WinCC V16, SIMATIC WinCC V17, SIMATIC WinCC V18, SIMATIC WinCC V19, SIMOCODE ES V16, SIMOCODE ES V17, SIMOCODE ES V18, SIMO
CC V16, SIMATIC WinCC V17, SIMATIC WinCC V18, SIMATIC WinCC V19, SIMOCODE ES V16, SIMOCODE ES V17, SIMOCODE ES V18, SIMOCODE ES V19, SIMOTION SCOUT TIA V5.4, SIMOTION SCOUT TIA V5.5, SIMOTION SCOUT TIA V5.6, SINAMICS Startdrive V16, SINAMICS Startdrive V17, SINAMICS Startdrive V18, SINAMICS Startdrive V19, SIRIUS Safety ES V17 (TIA Portal), SIRIUS Safety ES V18 (TIA Portal), SIRIUS Safety ES V19 (TIA Portal), SIRIUS Soft Starter ES V17 (TIA Portal), SIRIUS Soft Starter ES V18 (TIA Portal), SIRIUS Soft Starter ES V19 (TIA Portal), TIA Portal Cloud V16, TIA Portal Cloud V17, TIA Portal Cloud V18, TIA Portal Cloud V19 Problem Types: CWE-502 Description: A vulnerability has been identified in SI
TIA Portal Cloud V18, TIA Portal Cloud V19 Problem Types: CWE-502 Description: A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16 (All versions), SIMATIC STEP 7 Safety V17 (All versions), SIMATIC STEP 7 Safety V18 (All versions), SIMATIC STEP 7 Safety V19 (All versions < V19 Update 4), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP 7 V18 (All versions), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC WinCC Unified V16 (All versions), SIMATIC WinCC Unified V17 (All versions), SIMATIC WinCC Unified V18 (All versions), SIMATIC WinCC Unified V19 (All versions <
C WinCC Unified V17 (All versions), SIMATIC WinCC Unified V18 (All versions), SIMATIC WinCC Unified V19 (All versions < V19 Update 4), SIMATIC WinCC V16 (All versions), SIMATIC WinCC V17 (All versions), SIMATIC WinCC V18 (All versions), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMOCODE ES V16 (All versions), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SINAMICS Startdrive V16 (All versions), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All ve
rsions), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), TIA Portal Cloud V16 (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions), TIA Portal Cloud V19 (All versions < V5.2.1.1). Affected products do not properly sanitize user-controllable input when parsing log files. Thi
All versions < V5.2.1.1). Affected products do not properly sanitize user-controllable input when parsing log files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-800126.html
CVE ID: CVE-2024-49850 State: PUBLISHED Published: 2024-10-21T12:18:44.098Z Last Updated: 2025-11-03T22:22:16.768Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos In case of malformed relocation record of kind BPF_CORE_TYPE_ID_LOCAL referencing a non-existing BTF type, function bpf_core_calc_relo_insn would cause a null pointer deference. Fix this by adding a proper check upper in call stack, as malformed relocation records could be passed from user space. Simplest reproducer is a program: r0 = 0 exit With a single relocation record: .insn_off = 0, /* patch first instr
pace. Simplest reproducer is a program: r0 = 0 exit With a single relocation record: .insn_off = 0, /* patch first instruction */ .type_id = 100500, /* this type id does not exist */ .access_str_off = 6, /* offset of string "0" */ .kind = BPF_CORE_TYPE_ID_LOCAL, See the link for original reproducer or next commit for a test case. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/dc7ce14f00bcd50641f2110b7a32aa6552e0780f - https://git.kernel.org/stable/c/2288b54b96dcb55bedebcef3572bb8821fc5e708 - https://git.kernel.org/stable/c/584cd3ff792e1edbea20b2a7df55897159b0be3e - https://git.kernel.org/stable/c/e7e9c5b2dda29067332df
git.kernel.org/stable/c/584cd3ff792e1edbea20b2a7df55897159b0be3e - https://git.kernel.org/stable/c/e7e9c5b2dda29067332df2a85b0141a92b41f218 - https://git.kernel.org/stable/c/3d2786d65aaa954ebd3fcc033ada433e10da21c4
CVE ID: CVE-2024-49851 State: PUBLISHED Published: 2024-10-21T12:18:44.742Z Last Updated: 2025-11-03T22:22:18.217Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tpm: Clean up TPM space after command failure tpm_dev_transmit prepares the TPM space before attempting command transmission. However if the command fails no rollback of this preparation is done. This can result in transient handles being leaked if the device is subsequently closed with no further commands performed. Fix this by flushing the space in the event of command transmission failure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: R
the event of command transmission failure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/87e8134c18977b566f4ec248c8a147244da69402 - https://git.kernel.org/stable/c/2c9b228938e9266a1065a3f4fe5c99b7235dc439 - https://git.kernel.org/stable/c/ebc4e1f4492d114f9693950621b3ea42b2f82bec - https://git.kernel.org/stable/c/c84ceb546f30432fccea4891163f7050f5bee5dd - https://git.kernel.org/stable/c/82478cb8a23bd4f97935bbe60d64528c6d9918b4 - https://git.kernel.org/stable/c/adf4ce162561222338cf2c9a2caa294527f7f721 - https://git.kernel.org/stable/c/3f9f72d843c92fb6f4ff7460d774413cde7f254c - https://git.kernel.org/stable/c/e3aaebcbb7