CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,436 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,436
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product siemens:sinec_nms. Show all products

27 CVEs, showing 1 to 27
CVESeverityTitlePublished
CVE-2026-25656High 7.8A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1).Feb 10, 2026
CVE-2026-25655High 7.8A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2).Feb 10, 2026
CVE-2025-15467High 8.8Stack buffer overflow in CMS (Auth)EnvelopedData parsing
Assigned by openssl
Jan 27, 2026
CVE-2025-40755High 8.8A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1).Oct 14, 2025
CVE-2025-30033High 7.8The affected setup component is vulnerable to DLL hijacking.
Assigned by siemens
Aug 12, 2025
CVE-2023-6237Medium 5.9Excessive time spent checking invalid RSA public keys
Assigned by openssl
Apr 25, 2024
CVE-2024-28182Medium 5.3Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage
Assigned by GitHub_M
Apr 4, 2024
CVE-2024-2466Medium 6.5TLS certificate check bypass with mbedTLS
Assigned by curl
Mar 27, 2024
CVE-2024-2379Medium 6.3QUIC certificate check bypass with wolfSSL
Assigned by curl
Mar 27, 2024
CVE-2024-2398High 8.6HTTP/2 push headers memory-leak
Assigned by curl
Mar 27, 2024
CVE-2024-2004Low 3.5Usage of disabled protocol
Assigned by curl
Mar 27, 2024
CVE-2024-28757High 7.5libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
Assigned by mitre
Mar 10, 2024
CVE-2024-25062High 7.5An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5.
Assigned by mitre
Feb 4, 2024
CVE-2023-52425High 7.5libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.
Assigned by mitre
Feb 4, 2024
CVE-2023-52426Medium 5.5libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.
Assigned by mitre
Feb 4, 2024
CVE-2024-0727Medium 5.5PKCS12 Decoding crashes
Assigned by openssl
Jan 26, 2024
CVE-2023-6129Medium 6.5POLY1305 MAC implementation corrupts vector registers on PowerPC
Assigned by openssl
Jan 9, 2024
CVE-2023-46219Medium 5.3When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.
Assigned by hackerone
Dec 12, 2023
CVE-2023-46218Medium 6.5This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible.
Assigned by hackerone
Dec 7, 2023
CVE-2023-5678Medium 5.3Excessive time spent in DH check / generation with large Q parameter value
Assigned by openssl
Nov 6, 2023
CVE-2023-5363High 7.5Incorrect cipher key & IV length processing
Assigned by openssl
Oct 24, 2023
CVE-2023-44487
Known exploited
High 7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Assigned by mitre
Oct 10, 2023
CVE-2023-4807High 7.8POLY1305 MAC implementation corrupts XMM registers on Windows
Assigned by openssl
Sep 8, 2023
CVE-2023-39615Medium 6.5Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c.
Assigned by mitre
Aug 29, 2023
CVE-2022-0778High 7.5Infinite loop in BN_mod_sqrt() reachable when parsing certificates
Assigned by openssl
Mar 15, 2022
CVE-2021-40438
Known exploited
Critical 9.0mod_proxy SSRF
Assigned by apache
Sep 16, 2021
CVE-2021-3449Medium 5.9NULL pointer deref in signature_algorithms processing
Assigned by openssl
Mar 25, 2021

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.