CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 06:30 UTC)

What this means for you

This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,437; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product siemens:sinema_remote_connect_server. Show all products

24 CVEs, showing 1 to 24

CVE	Severity	Title	Published
CVE-2025-40819	Medium 4.3	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4).	Dec 9, 2025
CVE-2025-40818	Low 3.3	A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4).	Dec 9, 2025
CVE-2024-6387	High 8.1	Openssh: regresshion - race condition in ssh allows rce/dos Assigned by redhat	Jul 1, 2024
CVE-2022-0778	High 7.5	Infinite loop in BN_mod_sqrt() reachable when parsing certificates Assigned by openssl	Mar 15, 2022
CVE-2022-25314	High 7.5	In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString. Assigned by mitre	Feb 18, 2022
CVE-2022-25315	Critical 9.8	In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. Assigned by mitre	Feb 18, 2022
CVE-2022-25313	Medium 6.5	In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element. Assigned by mitre	Feb 18, 2022
CVE-2022-25235	Critical 9.8	xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context. Assigned by mitre	Feb 16, 2022
CVE-2022-25236	Critical 9.8	xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs. Assigned by mitre	Feb 16, 2022
CVE-2022-23990	High 7.5	Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function. Assigned by mitre	Jan 26, 2022
CVE-2022-23852	Critical 9.8	Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES. Assigned by mitre	Jan 24, 2022
CVE-2022-22822	Critical 9.8	addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Assigned by mitre	Jan 8, 2022
CVE-2022-22823	Critical 9.8	build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Assigned by mitre	Jan 8, 2022
CVE-2022-22824	Critical 9.8	defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Assigned by mitre	Jan 8, 2022
CVE-2022-22825	High 8.8	lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Assigned by mitre	Jan 8, 2022
CVE-2022-22826	High 8.8	nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Assigned by mitre	Jan 8, 2022
CVE-2022-22827	High 8.8	storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Assigned by mitre	Jan 8, 2022
CVE-2021-46143	High 8.1	In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize. Assigned by mitre	Jan 6, 2022
CVE-2021-45960	High 8.8	In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memo… Assigned by mitre	Jan 1, 2022
CVE-2021-40438 Known exploited	Critical 9.0	mod_proxy SSRF Assigned by apache	Sep 16, 2021
CVE-2021-22924	Low 3.7	libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take… Assigned by hackerone	Aug 5, 2021
CVE-2021-22925	Medium 5.3	curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. Assigned by hackerone	Aug 5, 2021
CVE-2020-7595	High 7.5	xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. Assigned by mitre	Jan 21, 2020
CVE-2019-19956	High 7.5	xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. Assigned by mitre	Dec 24, 2019

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.