https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T17:30:44.280515+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-182229 EUVD-2026-182229 2026-10-25T17:30:44.284057+00:00 EUVD-2026-182229 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4531 fkie_cve-2011-4531 2026-10-25T17:30:44.284089+00:00

Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1) get_target_ocx_param or (2) send_target_ocx_param command.

 https://cve.radiocsirt.org/vuln/ghsa-px66-m46c-vmhx GHSA-px66-m46c-vmhx 2026-10-25T17:30:44.284120+00:00

Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1) get_target_ocx_param or (2) send_target_ocx_param command.

 https://cve.radiocsirt.org/vuln/gsd-2011-4531 gsd-2011-4531 2026-10-25T17:30:44.284137+00:00 gsd-2011-4531 https://cve.radiocsirt.org/vuln/icsa-11-361-01 ICSA-11-361-01 — Siemens Automation License Manager Vulnerabilities 2026-10-25T17:30:44.284148+00:00

Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _licensekey command, as demonstrated by the (1) check_licensekey or (2) read_licensekey command. Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon crash) via long fields, as demonstrated by fields to the (1) open_session->workstation->NAME or (2) grant->VERSION function. Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1) get_target_ocx_param or (2) send_target_ocx_param command. Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method.