Lucene search
K

7 matches found

CNVD
CNVD
added 2025/10/21 12:0 a.m.2 views

Newforma Project Center Server Code Execution Vulnerability

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. A code execution vulnerability exists in Newforma Project Center...

9.8CVSS7.9AI score0.00327EPSS
Exploits0References1
CNVD
CNVD
added 2025/10/21 12:0 a.m.3 views

Newforma Project Center Server Security Bypass Vulnerability

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. A security bypass vulnerability exists in Newforma Project Cente...

9.8CVSS6.8AI score0.0015EPSS
Exploits0References1
CVE
CVE
added 2025/10/09 8:19 p.m.17 views

CVE-2025-35051

CVE-2025-35051 affects Newforma Project Center Server (NPCS). The vulnerability exists because NPCS accepts serialized .NET data via the “/ProjectCenter.rem” endpoint on port 9003, enabling a remote, unauthenticated attacker to execute arbitrary code with the NT AUTHORITY\NetworkService privilege...

9.8CVSS7.6AI score0.00327EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.1 views

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. A directory traversal vulnerability exists in Newforma Project...

9.8CVSS6.3AI score0.0015EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.3 views

PT-2025-41466

Name of the Vulnerable Software and Affected Versions Newforma Info Exchange affected versions not specified Description Newforma Info Exchange accepts serialized .NET data via the /remoteweb/remote.rem API endpoint without proper validation. This allows a remote, unauthenticated attacker to...

9.8CVSS7.5AI score0.0039EPSS
Exploits0References12
RedhatCVE
RedhatCVE
added 2025/04/30 12:6 a.m.10 views

CVE-2024-32499

Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed...

9.8CVSS8AI score0.00533EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/28 12:0 a.m.3 views

PT-2025-18095 · Newforma · Newforma Project Center Server

Name of the Vulnerable Software and Affected Versions: Newforma Project Center Server versions through 2023.3.0.32259 Description: The issue allows remote code execution because .NET Remoting is exposed. Recommendations: For Newforma Project Center Server versions through 2023.3.0.32259, consider...

9.8CVSS7.2AI score0.00533EPSS
Exploits0References7
Rows per page
Query Builder