Lucene search
+L

19448 matches found

CVE
CVE
added 2025/10/07 6:21 p.m.19 views

CVE-2025-3449

The CVE-2025-3449 issue affects the SDM component of B&R Automation Runtime, before version 6.4. Root cause: generation of predictable numbers/identifiers that can be exploited by an unauthenticated, network-based attacker. Impact: potential takeover of already established sessions. Documented in...

4.2CVSS6.6AI score0.00192EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/07 6:21 p.m.20 views

CVE-2025-3449 Weak Session Token used in Automation Runtime SDM

A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established sessions...

4.2CVSS0.00192EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/07 6:21 p.m.8 views

CVE-2025-3449 Weak Session Token used in Automation Runtime SDM

A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established sessions...

4.2CVSS6.6AI score0.00192EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/07 6:21 p.m.28 views

CVE-2025-3448

CVE-2025-3448 describes a reflected cross-site scripting (XSS) in the System Diagnostics Manager (SDM) of B&R Automation Runtime, prior to 6.4 . The vulnerability allows a remote attacker to cause the affected user’s browser to execute arbitrary JavaScript, via crafted input during web page gener...

6.1CVSS6AI score0.00263EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 6:21 p.m.10 views

EUVD-2025-32883

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in B&R Industrial Automation Automation Runtime.This issue affects Automation Runtime: from 6.0 before 6.4...

6.1CVSS6AI score0.00263EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/07 6:21 p.m.16 views

CVE-2025-3448 XSS on SDM

Reflected cross-site scripting XSS vulnerabilities exist in System Diagnostics Manager SDM of B&R Automation Runtime versions before 6.4 that enables a remote attacker to execute arbitrary JavaScript code in the context of the attacked user’s browser session...

6.1CVSS0.00263EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/07 6:21 p.m.5 views

CVE-2025-3448 XSS on SDM

Reflected cross-site scripting XSS vulnerabilities exist in System Diagnostics Manager SDM of B&R Automation Runtime versions before 6.4 that enables a remote attacker to execute arbitrary JavaScript code in the context of the attacked user’s browser session...

6.1CVSS6AI score0.00263EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/07 6:15 p.m.12 views

CVE-2025-3450

An Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime versions before 6.3 and before Q4.93 may allow an unauthenticated network-based attacker to delete data causing denial of service conditions...

10CVSS0.00281EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/07 6:03 p.m.21 views

CVE-2025-3450 Automation Runtime SDM requests may impact system

An Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime versions before 6.3 and before Q4.93 may allow an unauthenticated network-based attacker to delete data causing denial of service conditions...

10CVSS0.00281EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 6:03 p.m.14 views

EUVD-2025-32721

Improper Resource Locking vulnerability in B&R Industrial Automation Automation Runtime.This issue affects Automation Runtime: from 6.0 before 6.3, before Q4.93...

10CVSS6.5AI score0.00281EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/07 6:03 p.m.6 views

CVE-2025-3450 Automation Runtime SDM requests may impact system

An Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime versions before 6.3 and before Q4.93 may allow an unauthenticated network-based attacker to delete data causing denial of service conditions...

10CVSS6.5AI score0.00281EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/07 6:03 p.m.27 views

CVE-2025-3450

CVE-2025-3450 describes an Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime . Affected versions are before 6.3 and before Q4.93, where an unauthenticated, network-based attacker could delete data, leading to denial of service. The issue stems from resource lo...

10CVSS6.5AI score0.00281EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-2684

Malware in sbrugna...

10CVSS9AI score0.04597EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2020-25737

Malware in sbrugna...

6.1CVSS5.5AI score0.0086EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2012-0257

Malware in sbrugna...

5CVSS6.2AI score0.1021EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-30327

Malware in sbrugna...

8.8CVSS8.6AI score0.01138EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2009-0476

Malware in sbrugna...

4.3CVSS6.4AI score0.0294EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2021-14216

Malware in sbrugna...

10CVSS9.1AI score0.03828EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2015-7802

Malware in sbrugna...

6.5CVSS6.4AI score0.02783EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2018-6705

Malware in sbrugna...

7.5CVSS7.7AI score0.04495EPSS
SaveExploits1References3
Rows per page
Query Builder