{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Siemens heeft kwetsbaarheden verholpen in diverse producten als CADRA, IAM, Mendix, OpCenter, RUGGEDCOM, SIDIS en SIMATIC.", "title": "Feiten" }, { "category": "description", "text": "De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:\n\n- Denial-of-Service (DoS)\n- Cross-Site Scripting\n- Manipulatie van gegevens\n- Omzeilen van een beveiligingsmaatregel\n- (Remote) code execution (SYSTEM rechten)\n- (Remote) code execution (Gebruikersrechten)\n- Toegang tot gevoelige gegevens\n- Verhogen van rechten\n\nDe kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.", "title": "Interpretaties" }, { "category": "description", "text": "Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "general", "text": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "title": "CWE-78" }, { "category": "general", "text": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "title": "CWE-79" }, { "category": "general", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "general", "text": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "title": "CWE-120" }, { "category": "general", "text": "Stack-based Buffer Overflow", "title": "CWE-121" }, { "category": "general", "text": "Heap-based Buffer Overflow", "title": "CWE-122" }, { "category": "general", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "general", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "general", "text": "Observable Discrepancy", "title": "CWE-203" }, { "category": "general", "text": "Observable Timing Discrepancy", "title": "CWE-208" }, { "category": "general", "text": "Insecure Inherited Permissions", "title": "CWE-277" }, { "category": "general", "text": "Authentication Bypass by Capture-replay", "title": "CWE-294" }, { "category": "general", "text": "Cryptographic Issues", "title": "CWE-310" }, { "category": "general", "text": "Reusing a Nonce, Key Pair in Encryption", "title": "CWE-323" }, { "category": "general", "text": "Improper Verification of Cryptographic Signature", "title": "CWE-347" }, { "category": "general", "text": "Covert Timing Channel", "title": "CWE-385" }, { "category": "general", "text": "Detection of Error Condition Without Action", "title": "CWE-390" }, { "category": "general", "text": "Double Free", "title": "CWE-415" }, { "category": "general", "text": "Untrusted Search Path", "title": "CWE-426" }, { "category": "general", "text": "Use of Cache Containing Sensitive Information", "title": "CWE-524" }, { "category": "general", "text": "Integer Overflow to Buffer Overflow", "title": "CWE-680" }, { "category": "general", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" }, { "category": "general", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "general", "text": "Access of Resource Using Incompatible Type ('Type Confusion')", "title": "CWE-843" }, { "category": "general", "text": "Missing Authorization", "title": "CWE-862" }, { "category": "general", "text": "Incorrect Authorization", "title": "CWE-863" }, { "category": "general", "text": "Improper Enforcement of Message Integrity During Transmission in a Communication Channel", "title": "CWE-924" }, { "category": "general", "text": "Incorrect Bitwise Shift of Integer", "title": "CWE-1335" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference", "url": "https://cert-portal.siemens.com/productcert/html/ssa-096828.html" }, { "category": "external", "summary": "Reference", "url": "https://cert-portal.siemens.com/productcert/html/ssa-104023.html" }, { "category": "external", "summary": "Reference", "url": "https://cert-portal.siemens.com/productcert/html/ssa-288252.html" }, { "category": "external", "summary": "Reference", "url": "https://cert-portal.siemens.com/productcert/html/ssa-470355.html" }, { "category": "external", "summary": "Reference", "url": "https://cert-portal.siemens.com/productcert/html/ssa-585531.html" }, { "category": "external", "summary": "Reference", "url": "https://cert-portal.siemens.com/productcert/html/ssa-814963.html" }, { "category": "external", "summary": "Reference", "url": "https://cert-portal.siemens.com/productcert/html/ssa-828211.html" } ], "title": "Kwetsbaarheden verholpen in Siemens producten", "tracking": { "current_release_date": "2026-07-14T13:45:35.925342Z", "generator": { "date": "2025-08-04T16:30:00Z", "engine": { "name": "V.A.", "version": "1.3" } }, "id": "NCSC-2026-0229", "initial_release_date": "2026-07-14T13:45:35.925342Z", "revision_history": [ { "date": "2026-07-14T13:45:35.925342Z", "number": "1.0.0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-1" } } ], "category": "product_name", "name": "CADRA" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-2" } } ], "category": "product_name", "name": "COMOS V10.4.5" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-3" } } ], "category": "product_name", "name": "COMOS V10.6" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-4" } } ], "category": "product_name", "name": "Cpu 1518F-4 Pn/Dp Mfp Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-5" } } ], "category": "product_name", "name": "Designcenter NX" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-6" } } ], "category": "product_name", "name": "Mendix Runtime" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-7" } } ], "category": "product_name", "name": "Opcenter X" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-8" } } ], "category": "product_name", "name": "RUGGEDCOM APE1808" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-9" } } ], "category": "product_name", "name": "RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-10" } } ], "category": "product_name", "name": "RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-11" } } ], "category": "product_name", "name": "RUGGEDCOM ROX MX5000" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-12" } } ], "category": "product_name", "name": "RUGGEDCOM ROX MX5000 FIRMWARE" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-13" } } ], "category": "product_name", "name": "RUGGEDCOM ROX MX5000RE" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-14" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1400" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-15" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1400 FIRMWARE" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-16" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1500" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-17" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1500 FIRMWARE" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-18" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1501" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-19" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1510" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-20" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1510 FIRMWARE" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-21" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1511" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-22" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1511 FIRMWARE" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-23" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1512" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-24" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1512 FIRMWARE" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-25" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1524" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-26" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1524 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-27" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1536" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-28" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX1536 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-29" } } ], "category": "product_name", "name": "RUGGEDCOM ROX RX5000" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-30" } } ], "category": "product_name", "name": "RUGGEDCOM RST2428P" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-31" } } ], "category": "product_name", "name": "RUGGEDCOM RST2428P (6GK6242-6PA00)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-32" } } ], "category": "product_name", "name": "Ruggedcom Rox Mx5000Re Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-33" } } ], "category": "product_name", "name": "Ruggedcom Rox Rx1501 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-34" } } ], "category": "product_name", "name": "Ruggedcom Rox Rx5000 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-35" } } ], "category": "product_name", "name": "SCALANCE M804PB (6GK5804-0AP00-2AA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-36" } } ], "category": "product_name", "name": "SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-37" } } ], "category": "product_name", "name": "SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-38" } } ], "category": "product_name", "name": "SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-39" } } ], "category": "product_name", "name": "SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-40" } } ], "category": "product_name", "name": "SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-41" } } ], "category": "product_name", "name": "SCALANCE M874-2 (6GK5874-2AA00-2AA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-42" } } ], "category": "product_name", "name": "SCALANCE M874-3 (6GK5874-3AA00-2AA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-43" } } ], "category": "product_name", "name": "SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-44" } } ], "category": "product_name", "name": "SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-45" } } ], "category": "product_name", "name": "SCALANCE M876-4 (6GK5876-4AA10-2BA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-46" } } ], "category": "product_name", "name": "SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-47" } } ], "category": "product_name", "name": "SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-48" } } ], "category": "product_name", "name": "SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-49" } } ], "category": "product_name", "name": "SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-50" } } ], "category": "product_name", "name": "SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-51" } } ], "category": "product_name", "name": "SCALANCE S615 (6GK5615-0AA00-2AA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-52" } } ], "category": "product_name", "name": "SCALANCE S615 EEC (6GK5615-0AA01-2AA2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-53" } } ], "category": "product_name", "name": "SCALANCE S615 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-54" } } ], "category": "product_name", "name": "SCALANCE SC622-2C (6GK5622-2GS00-2AC2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-55" } } ], "category": "product_name", "name": "SCALANCE SC622-2C Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-56" } } ], "category": "product_name", "name": "SCALANCE SC626-2C (6GK5626-2GS00-2AC2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-57" } } ], "category": "product_name", "name": "SCALANCE SC626-2C Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-58" } } ], "category": "product_name", "name": "SCALANCE SC632-2C" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-59" } } ], "category": "product_name", "name": "SCALANCE SC632-2C (6GK5632-2GS00-2AC2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-60" } } ], "category": "product_name", "name": "SCALANCE SC632-2C Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-61" } } ], "category": "product_name", "name": "SCALANCE SC636-2C (6GK5636-2GS00-2AC2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-62" } } ], "category": "product_name", "name": "SCALANCE SC636-2C Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-63" } } ], "category": "product_name", "name": "SCALANCE SC642-2C (6GK5642-2GS00-2AC2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-64" } } ], "category": "product_name", "name": "SCALANCE SC642-2C Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-65" } } ], "category": "product_name", "name": "SCALANCE SC646-2C" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-66" } } ], "category": "product_name", "name": "SCALANCE SC646-2C (6GK5646-2GS00-2AC2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-67" } } ], "category": "product_name", "name": "SCALANCE SC646-2C Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-68" } } ], "category": "product_name", "name": "SCALANCE WAM763-1 (6GK5763-1AL00-7DA0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-69" } } ], "category": "product_name", "name": "SCALANCE WAM766-1 (EU) (6GK5766-1GE00-7DA0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-70" } } ], "category": "product_name", "name": "SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-71" } } ], "category": "product_name", "name": "SCALANCE WAM766-1 EEC (EU) (6GK5766-1GE00-7TA0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-72" } } ], "category": "product_name", "name": "SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-73" } } ], "category": "product_name", "name": "SCALANCE WUM763-1" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-74" } } ], "category": "product_name", "name": "SCALANCE WUM763-1 (6GK5763-1AL00-3AA0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-75" } } ], "category": "product_name", "name": "SCALANCE WUM763-1 (6GK5763-1AL00-3DA0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-76" } } ], "category": "product_name", "name": "SCALANCE WUM766-1 (EU) (6GK5766-1GE00-3DA0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-77" } } ], "category": "product_name", "name": "SCALANCE WUM766-1 (US) (6GK5766-1GE00-3DB0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-78" } } ], "category": "product_name", "name": "SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-79" } } ], "category": "product_name", "name": "SCALANCE XCH328" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-80" } } ], "category": "product_name", "name": "SCALANCE XCH328 (6GK5328-4TS01-2EC2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-81" } } ], "category": "product_name", "name": "SCALANCE XCM324" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-82" } } ], "category": "product_name", "name": "SCALANCE XCM324 (6GK5324-8TS01-2AC2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-83" } } ], "category": "product_name", "name": "SCALANCE XCM328" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-84" } } ], "category": "product_name", "name": "SCALANCE XCM328 (6GK5328-4TS01-2AC2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-85" } } ], "category": "product_name", "name": "SCALANCE XCM332" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-86" } } ], "category": "product_name", "name": "SCALANCE XCM332 (6GK5332-0GA01-2AC2)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-87" } } ], "category": "product_name", "name": "SCALANCE XRH334 (24 V DC, 8xFO, CC)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-88" } } ], "category": "product_name", "name": "SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-89" } } ], "category": "product_name", "name": "SCALANCE XRM334 (230 V AC, 12xFO)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-90" } } ], "category": "product_name", "name": "SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-91" } } ], "category": "product_name", "name": "SCALANCE XRM334 (230 V AC, 8xFO)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-92" } } ], "category": "product_name", "name": "SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-93" } } ], "category": "product_name", "name": "SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-94" } } ], "category": "product_name", "name": "SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-95" } } ], "category": "product_name", "name": "SCALANCE XRM334 (24 V DC, 12xFO)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-96" } } ], "category": "product_name", "name": "SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-97" } } ], "category": "product_name", "name": "SCALANCE XRM334 (24 V DC, 8xFO)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-98" } } ], "category": "product_name", "name": "SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-99" } } ], "category": "product_name", "name": "SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-100" } } ], "category": "product_name", "name": "SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-101" } } ], "category": "product_name", "name": "SCALANCE XRM334 (2x230 V AC, 12xFO)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-102" } } ], "category": "product_name", "name": "SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-103" } } ], "category": "product_name", "name": "SCALANCE XRM334 (2x230 V AC, 8xFO)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-104" } } ], "category": "product_name", "name": "SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-105" } } ], "category": "product_name", "name": "SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-106" } } ], "category": "product_name", "name": "SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-107" } } ], "category": "product_name", "name": "SIDIS Prime" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-108" } } ], "category": "product_name", "name": "SIDIS Secured SmartPlug" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-109" } } ], "category": "product_name", "name": "SIMATIC CN 4100" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-110" } } ], "category": "product_name", "name": "SIMATIC MV540 H (6GF3540-0GE10)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-111" } } ], "category": "product_name", "name": "SIMATIC MV540 H Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-112" } } ], "category": "product_name", "name": "SIMATIC MV540 S (6GF3540-0CD10)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-113" } } ], "category": "product_name", "name": "SIMATIC MV540 S Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-114" } } ], "category": "product_name", "name": "SIMATIC MV550 H (6GF3550-0GE10)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-115" } } ], "category": "product_name", "name": "SIMATIC MV550 H Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-116" } } ], "category": "product_name", "name": "SIMATIC MV550 S (6GF3550-0CD10)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-117" } } ], "category": "product_name", "name": "SIMATIC MV560 U (6GF3560-0LE10)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-118" } } ], "category": "product_name", "name": "SIMATIC MV560 U Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-119" } } ], "category": "product_name", "name": "SIMATIC MV560 X (6GF3560-0HE10)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-120" } } ], "category": "product_name", "name": "SIMATIC MV560 X Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-121" } } ], "category": "product_name", "name": "SIMATIC S7" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-122" } } ], "category": "product_name", "name": "SIMATIC S7 CPU 1500 firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-123" } } ], "category": "product_name", "name": "SIMATIC S7-1500" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-124" } } ], "category": "product_name", "name": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-125" } } ], "category": "product_name", "name": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-126" } } ], "category": "product_name", "name": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-127" } } ], "category": "product_name", "name": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-128" } } ], "category": "product_name", "name": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-129" } } ], "category": "product_name", "name": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-130" } } ], "category": "product_name", "name": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-131" } } ], "category": "product_name", "name": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-132" } } ], "category": "product_name", "name": "SIMATIC S7-PLCSIM Advanced" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-133" } } ], "category": "product_name", "name": "SINAMICS PERFECT HARMONY GH180 6SR5" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-134" } } ], "category": "product_name", "name": "SINEC PNI" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-135" } } ], "category": "product_name", "name": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-136" } } ], "category": "product_name", "name": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-137" } } ], "category": "product_name", "name": "Scalance Sc622-2C Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-138" } } ], "category": "product_name", "name": "Scalance Sc632-2C Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-139" } } ], "category": "product_name", "name": "Scalance Sc646-2C Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-140" } } ], "category": "product_name", "name": "Scalance W700 Ieee 802.11Ax Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-141" } } ], "category": "product_name", "name": "Scalance Wam763-1" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-142" } } ], "category": "product_name", "name": "Scalance Wam766-1" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-143" } } ], "category": "product_name", "name": "Scalance Wam766-1 Eec" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-144" } } ], "category": "product_name", "name": "Scalance Wum766-1" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-145" } } ], "category": "product_name", "name": "Simatic Mv550 S Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-146" } } ], "category": "product_name", "name": "Simcenter 3D" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-147" } } ], "category": "product_name", "name": "Simcenter Femap V2506" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-148" } } ], "category": "product_name", "name": "Simcenter Femap V2512" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-149" } } ], "category": "product_name", "name": "Simcenter Nastran" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-150" } } ], "category": "product_name", "name": "Simcenter STAR-CCM+" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-151" } } ], "category": "product_name", "name": "Sinamics Perfect Harmony Gh180 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-152" } } ], "category": "product_name", "name": "Sinec Pni" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-153" } } ], "category": "product_name", "name": "Solid Edge SE2025" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-154" } } ], "category": "product_name", "name": "Solid Edge SE2026" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-155" } } ], "category": "product_name", "name": "Teamcenter Visualization V2412" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-156" } } ], "category": "product_name", "name": "Teamcenter Visualization V2506" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-157" } } ], "category": "product_name", "name": "Teamcenter Visualization V2512" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-158" } } ], "category": "product_name", "name": "Tecnomatix Plant Simulation V2404" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-159" } } ], "category": "product_name", "name": "Tecnomatix Plant Simulation V2504" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-160" } } ], "category": "product_name", "name": "Tecnomatix Process Simulate" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-161" } } ], "category": "product_name", "name": "scalance_sc622-2c" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-162" } } ], "category": "product_name", "name": "scalance_sc626-2c" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-163" } } ], "category": "product_name", "name": "scalance_sc626-2c_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-164" } } ], "category": "product_name", "name": "scalance_sc636-2c" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-165" } } ], "category": "product_name", "name": "scalance_sc636-2c_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-166" } } ], "category": "product_name", "name": "scalance_sc642-2c" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-167" } } ], "category": "product_name", "name": "scalance_sc642-2c_firmware" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2005-2096", "notes": [ { "category": "description", "text": "zlib versions 1.2 and later contain a denial of service vulnerability caused by a crafted compressed stream with an incomplete code description, resulting in a buffer overflow and application crash.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2005-2096 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2005/cve-2005-2096.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "baseScore": 7.3, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2005-2096" }, { "cve": "CVE-2016-9840", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "description", "text": "Multiple updates to zlib, Java OpenJDK, IBM Java, Python, Pyinstaller, and Boost address vulnerabilities primarily involving out-of-bounds and improper pointer arithmetic in zlib's inftrees.c, along with other security issues across these platforms.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2016-9840 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2016/cve-2016-9840.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2016-9840" }, { "cve": "CVE-2016-9841", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "description", "text": "Multiple updates to zlib and various IBM and OpenJDK Java versions address pointer arithmetic vulnerabilities, serialization issues, XML External Entity Injection, and other security flaws, with zlib upgraded to version 1.2.11 to fix several low severity CVEs.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2016-9841 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2016/cve-2016-9841.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2016-9841" }, { "cve": "CVE-2016-9842", "cwe": { "id": "CWE-1335", "name": "Incorrect Bitwise Shift of Integer" }, "notes": [ { "category": "other", "text": "Incorrect Bitwise Shift of Integer", "title": "CWE-1335" }, { "category": "description", "text": "Multiple updates to zlib versions 1.2.7 through 1.2.11 and various Java OpenJDK and IBM Java releases address vulnerabilities including undefined left shifts of negative integers, out-of-bounds pointer arithmetic, and big-endian pointer issues with potential security impacts.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2016-9842 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2016/cve-2016-9842.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2016-9842" }, { "cve": "CVE-2017-14919", "notes": [ { "category": "description", "text": "Node.js versions prior to 4.8.5, 6.11.5, and 8.8.0 are vulnerable to remote denial of service due to invalid windowBits parameter handling in zlib 1.2.9, while Mozilla Firefox ESR 68.2 includes multiple security and stability fixes.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2017-14919 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2017/cve-2017-14919.json" } ], "scores": [ { "cvss_v3": { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2017-14919" }, { "cve": "CVE-2018-25032", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "Multiple vulnerabilities in zlib versions prior to 1.2.12, including memory corruption and out-of-bounds access during compression with many distant matches, affect various products such as Oracle software, TensorFlow distributions, MariaDB, and others, leading to potential denial of service or crashes.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2018-25032 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2018/cve-2018-25032.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "baseScore": 8.2, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2018-25032" }, { "cve": "CVE-2019-9494", "cwe": { "id": "CWE-208", "name": "Observable Timing Discrepancy" }, "notes": [ { "category": "other", "text": "Observable Timing Discrepancy", "title": "CWE-208" }, { "category": "other", "text": "Use of Cache Containing Sensitive Information", "title": "CWE-524" }, { "category": "description", "text": "The hostapd and wpa_supplicant 2.9 updates address multiple security vulnerabilities including SAE side-channel attacks, disable Brainpool curve groups, fix PMF bypass issues, and introduce extensive protocol and cryptographic enhancements.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2019-9494 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2019/cve-2019-9494.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 5.9, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2019-9494" }, { "cve": "CVE-2019-9495", "cwe": { "id": "CWE-524", "name": "Use of Cache Containing Sensitive Information" }, "notes": [ { "category": "other", "text": "Use of Cache Containing Sensitive Information", "title": "CWE-524" }, { "category": "description", "text": "hostapd and wpa_supplicant versions prior to 2.7 and 2.9 respectively had vulnerabilities including side-channel attacks on EAP-PWD and SAE, with updates introducing security fixes, disabling Brainpool curves, and adding protocol and feature enhancements.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2019-9495 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2019/cve-2019-9495.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 3.7, "baseSeverity": "LOW" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2019-9495" }, { "cve": "CVE-2022-23303", "cwe": { "id": "CWE-203", "name": "Observable Discrepancy" }, "notes": [ { "category": "other", "text": "Observable Discrepancy", "title": "CWE-203" }, { "category": "other", "text": "Improper Enforcement of Message Integrity During Transmission in a Communication Channel", "title": "CWE-924" }, { "category": "description", "text": "wpa_supplicant and hostapd versions before 2.10 contain side-channel vulnerabilities in SAE and EAP-pwd due to incomplete fixes for CVE-2019-9494, addressed in updates resolving CVE-2022-23303 and CVE-2022-23304.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2022-23303 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-23303.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2022-23303" }, { "cve": "CVE-2022-23304", "cwe": { "id": "CWE-203", "name": "Observable Discrepancy" }, "notes": [ { "category": "other", "text": "Observable Discrepancy", "title": "CWE-203" }, { "category": "other", "text": "Improper Enforcement of Message Integrity During Transmission in a Communication Channel", "title": "CWE-924" }, { "category": "description", "text": "WPA_Supplicant and hostapd versions prior to 2.10 contain side-channel vulnerabilities in EAP-pwd and SAE protocols due to incomplete fixes for CVE-2019-9495, addressed in updates including version 2.9 and later.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2022-23304 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-23304.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2022-23304" }, { "cve": "CVE-2022-37434", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "other", "text": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "title": "CWE-120" }, { "category": "description", "text": "Multiple vulnerabilities affect zlib versions through 1.2.12, including heap-based buffer over-read and overflow in inflate.c triggered by large gzip header extra fields, alongside critical network vulnerabilities in various Oracle products with CVSS scores up to 9.8.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2022-37434 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-37434.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2022-37434" }, { "cve": "CVE-2022-37660", "cwe": { "id": "CWE-294", "name": "Authentication Bypass by Capture-replay" }, "notes": [ { "category": "other", "text": "Authentication Bypass by Capture-replay", "title": "CWE-294" }, { "category": "other", "text": "Reusing a Nonce, Key Pair in Encryption", "title": "CWE-323" }, { "category": "description", "text": "A vulnerability in hostapd 2.10 and earlier PKEX implementation allows an attacker who previously performed a PKEX association to manipulate future associations by capturing and altering public keys.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2022-37660 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-37660.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2022-37660" }, { "cve": "CVE-2022-48174", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "A critical stack overflow vulnerability in BusyBox's ash.c prior to version 1.35 allows unauthenticated remote code execution, affecting Oracle Communications Cloud Native Core Network Function and multiple NetApp products with a CVSS score of 9.8.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2022-48174 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48174.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2022-48174" }, { "cve": "CVE-2023-45853", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "other", "text": "Heap-based Buffer Overflow", "title": "CWE-122" }, { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "description", "text": "Multiple integer overflow and heap-based buffer overflow vulnerabilities in MiniZip within zlib (through version 1.3) and bundled products like pyminizip allow crafted ZIP files to cause heap corruption, denial of service, or remote code execution.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2023-45853 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-45853.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2023-45853" }, { "cve": "CVE-2025-5222", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "notes": [ { "category": "other", "text": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "title": "CWE-120" }, { "category": "description", "text": "A stack buffer overflow vulnerability (CVE-2025-5222) in ICU's SRBRoot::addTag function can lead to memory corruption and local arbitrary code execution, affecting ICU versions prior to 78.1.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2025-5222 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-5222.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.0, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2025-5222" }, { "cve": "CVE-2025-5914", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "other", "text": "Double Free", "title": "CWE-415" }, { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "description", "text": "This libarchive update fixes multiple vulnerabilities including integer overflows causing double free in archive_read_format_rar_seek_data(), heap buffer over-read in copy_from_lzss_window(), off-by-one errors in build_ustar_entry_name(), and reading past EOF in piped streams.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2025-5914 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-5914.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2025-5914" }, { "cve": "CVE-2025-9230", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "A moderate severity vulnerability (CVE-2025-9230) in OpenSSL's CMS password-based encryption causes out-of-bounds read/write in RFC 3211 KEK unwrap, potentially leading to crashes or memory corruption, with low exploitation likelihood and multiple vendor patches released.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2025-9230 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-9230.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2025-9230" }, { "cve": "CVE-2025-9231", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "notes": [ { "category": "other", "text": "Covert Timing Channel", "title": "CWE-385" }, { "category": "other", "text": "Observable Timing Discrepancy", "title": "CWE-208" }, { "category": "description", "text": "Multiple vulnerabilities including a timing side-channel in the SM2 algorithm on 64-bit ARM platforms, denial of service flaws in Oracle PeopleSoft and JD Edwards EnterpriseOne Tools, and memory issues in OpenSSL and NetApp products pose moderate to high risks.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2025-9231 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-9231.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2025-9231" }, { "cve": "CVE-2025-9232", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "description", "text": "Multiple OpenSSL vulnerabilities, including an out-of-bounds read in the HTTP client 'no_proxy' handling and timing side-channels in SM2 on ARM, affect various products causing denial of service and potential code execution in some cases.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2025-9232 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-9232.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.9, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2025-9232" }, { "cve": "CVE-2025-10585", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type ('Type Confusion')" }, "notes": [ { "category": "other", "text": "Access of Resource Using Incompatible Type ('Type Confusion')", "title": "CWE-843" }, { "category": "description", "text": "A high-severity type confusion vulnerability in the V8 engine of Chrome prior to version 140.0.7339.185 allows remote attackers to exploit heap corruption, with active exploits reported and mitigations integrated by multiple vendors.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2025-10585 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-10585.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2025-10585" }, { "cve": "CVE-2025-13223", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type ('Type Confusion')" }, "notes": [ { "category": "other", "text": "Access of Resource Using Incompatible Type ('Type Confusion')", "title": "CWE-843" }, { "category": "description", "text": "A high-severity type confusion vulnerability in the V8 engine of Google Chrome prior to version 142.0.7444.175 allows remote attackers to cause heap corruption, affecting Chromium-based browsers including Microsoft Edge.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2025-13223 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-13223.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2025-13223" }, { "cve": "CVE-2025-26465", "cwe": { "id": "CWE-390", "name": "Detection of Error Condition Without Action" }, "notes": [ { "category": "other", "text": "Detection of Error Condition Without Action", "title": "CWE-390" }, { "category": "description", "text": "OpenSSH versions 6.8p1 to 9.9p1 contain a moderate severity vulnerability in VerifyHostKeyDNS that enables complex machine-in-the-middle attacks through client memory exhaustion, affecting multiple vendors including NetApp and Apple.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2025-26465 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-26465.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "baseScore": 6.8, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2025-26465" }, { "cve": "CVE-2025-32462", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "notes": [ { "category": "other", "text": "Incorrect Authorization", "title": "CWE-863" }, { "category": "description", "text": "Sudo versions before 1.9.17p1 contain local privilege escalation vulnerabilities via the --host (CVE-2025-32462) and chroot (CVE-2025-32463) options, allowing users to bypass host restrictions in sudoers files across networked systems.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2025-32462 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-32462.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2025-32462" }, { "cve": "CVE-2025-40945", "cwe": { "id": "CWE-426", "name": "Untrusted Search Path" }, "notes": [ { "category": "other", "text": "Untrusted Search Path", "title": "CWE-426" }, { "category": "description", "text": "A vulnerability in the IAM Client SDK's untrusted search path affects multiple Siemens products, potentially allowing authenticated users to escalate privileges via local access.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2025-40945 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40945.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.7, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2025-40945" }, { "cve": "CVE-2026-0266", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "title": "CWE-79" }, { "category": "description", "text": "A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS allows authenticated administrators to inject JavaScript via the web interface, impacting PA-Series, VM-Series firewalls, and Panorama but excluding Cloud NGFW and Prisma Access.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2026-0266 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0266.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "baseScore": 4.8, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2026-0266" }, { "cve": "CVE-2026-0272", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "notes": [ { "category": "other", "text": "Missing Authorization", "title": "CWE-862" }, { "category": "other", "text": "Incorrect Authorization", "title": "CWE-863" }, { "category": "description", "text": "A privilege escalation vulnerability in Palo Alto Networks PAN-OS allows authenticated administrators with CLI access to gain root privileges, affecting PA-Series, VM-Series firewalls, and Panorama but not Cloud NGFW or Prisma Access.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Amber", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2026-0272 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0272.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2026-0272" }, { "cve": "CVE-2026-0273", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "title": "CWE-78" }, { "category": "description", "text": "A command injection vulnerability in Palo Alto Networks PAN-OS allows authenticated administrators with CLI or Web UI access to execute arbitrary root commands, affecting PA-Series, VM-Series firewalls, and Panorama but not Cloud NGFW or Prisma Access.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2026-0273 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-0273.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2026-0273" }, { "cve": "CVE-2026-5121", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "description", "text": "Multiple vulnerabilities in libarchive, including an integer overflow in ISO9660 image processing on 32-bit systems, can lead to heap buffer overflows and arbitrary code execution, alongside issues causing denial of service and information disclosure in RAR archive handling.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2026-5121 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-5121.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2026-5121" }, { "cve": "CVE-2026-7891", "cwe": { "id": "CWE-277", "name": "Insecure Inherited Permissions" }, "notes": [ { "category": "other", "text": "Insecure Inherited Permissions", "title": "CWE-277" }, { "category": "description", "text": "A vulnerability in all Mendix Runtime versions stems from insufficient documentation on System.User entity access rules, potentially causing overly permissive access and exposing sensitive data or enabling privilege escalation.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2026-7891 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-7891.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 9.1, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2026-7891" }, { "cve": "CVE-2026-22184", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "notes": [ { "category": "other", "text": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "title": "CWE-120" }, { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "zlib versions up to 1.3.1.2 contain a global buffer overflow in the untgz utility's TGZfname() function allowing local attackers to cause memory corruption or denial of service, while Oracle Outside In Technology 8.5.8 has a critical vulnerability enabling full product compromise by low-privileged users.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2026-22184 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-22184.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2026-22184" }, { "cve": "CVE-2026-54429", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" }, { "category": "description", "text": "A vulnerability in SIMATIC S7-PLCSIM Advanced allows an unauthenticated local attacker to cause a denial-of-service by exhausting memory through high-volume multicast traffic, requiring a manual restart without data loss and a specific project configuration active.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2026-54429 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-54429.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "baseScore": 7.4, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2026-54429" }, { "cve": "CVE-2026-56451", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "notes": [ { "category": "other", "text": "Improper Verification of Cryptographic Signature", "title": "CWE-347" }, { "category": "description", "text": "A vulnerability in Opcenter X versions before V2604 allows unauthenticated remote attackers to forge JWTs by exploiting improper JWT algorithm header validation, enabling authentication bypass and full user impersonation, including administrators.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] }, "references": [ { "category": "self", "summary": "CVE-2026-56451 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-56451.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10.0, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123", "CSAFPID-124", "CSAFPID-125", "CSAFPID-126", "CSAFPID-127", "CSAFPID-128", "CSAFPID-129", "CSAFPID-130", "CSAFPID-131", "CSAFPID-132", "CSAFPID-133", "CSAFPID-134", "CSAFPID-135", "CSAFPID-136", "CSAFPID-137", "CSAFPID-138", "CSAFPID-139", "CSAFPID-140", "CSAFPID-141", "CSAFPID-142", "CSAFPID-143", "CSAFPID-144", "CSAFPID-145", "CSAFPID-146", "CSAFPID-147", "CSAFPID-148", "CSAFPID-149", "CSAFPID-150", "CSAFPID-151", "CSAFPID-152", "CSAFPID-153", "CSAFPID-154", "CSAFPID-155", "CSAFPID-156", "CSAFPID-157", "CSAFPID-158", "CSAFPID-159", "CSAFPID-160", "CSAFPID-161", "CSAFPID-162", "CSAFPID-163", "CSAFPID-164", "CSAFPID-165", "CSAFPID-166", "CSAFPID-167" ] } ], "title": "CVE-2026-56451" } ] }