# Siemens Sinec Infrastructure Network Services


- [CVE-2020-27304](https://insights.sbomify.com/CVE-2020-27304/): Path traversal in civetweb (critical 9.8)
- [CVE-2021-22930](https://insights.sbomify.com/CVE-2021-22930/): Use After Free in node.js (critical 9.8)
- [CVE-2021-22931](https://insights.sbomify.com/CVE-2021-22931/): Code injection in Node (critical 9.8)
- [CVE-2020-11656](https://insights.sbomify.com/CVE-2020-11656/): Use after free in n/a (critical 9.8)
- [CVE-2019-19646](https://insights.sbomify.com/CVE-2019-19646/): Null dereference in n/a (critical 9.8)
- [CVE-2019-19317](https://insights.sbomify.com/CVE-2019-19317/): Denial of service in n/a (critical 9.8)
- [CVE-2021-20093](https://insights.sbomify.com/CVE-2021-20093/): Information disclosure in Wibu-Systems CodeMeter (critical 9.1)
- [CVE-2021-37701](https://insights.sbomify.com/CVE-2021-37701/): Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links (high 8.2)
- [CVE-2021-37712](https://insights.sbomify.com/CVE-2021-37712/): Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links (high 8.2)
- [CVE-2021-37713](https://insights.sbomify.com/CVE-2021-37713/): Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization (high 8.2)
- [CVE-2021-39134](https://insights.sbomify.com/CVE-2021-39134/): UNIX Symbolic Link (Symlink) Following in @npmcli/arborist (high 8.2)
- [CVE-2021-39135](https://insights.sbomify.com/CVE-2021-39135/): UNIX Symbolic Link (Symlink) Following in @npmcli/arborist (high 8.2)

---
From sbomify Insights: https://insights.sbomify.com/products/siemens/sinec-infrastructure-network-services/