Lucene search
K

66 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-8979

Malware in sbrugna...

7.5CVSS7.6AI score0.00141EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-8980

Malware in sbrugna...

5.4CVSS5.6AI score0.00254EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-19780

Malware in sbrugna...

9.1CVSS8.8AI score0.00128EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-12667

Malware in sbrugna...

7.5CVSS7.6AI score0.00423EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-8978

Malware in sbrugna...

6.5CVSS6.6AI score0.00294EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 7:32 a.m.2 views

CVE-2024-40395

An Insecure Direct Object Reference IDOR in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardless of access level...

6.5CVSS6.8AI score0.00332EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 3:24 p.m.8 views

CVE-2020-27263

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions, ar...

9.1CVSS7AI score0.00128EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/08/28 12:0 a.m.6 views

ThingWorx Kepware Server Installed (Windows)

Binary data thingworxkepwareserverwininstalled.nbin...

7.3AI score
Exploits0References1
NVD
NVD
added 2024/08/27 4:15 p.m.15 views

CVE-2024-40395

An Insecure Direct Object Reference IDOR in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardless of access level...

6.5CVSS0.00332EPSS
Exploits0References1
OSV
OSV
added 2024/08/27 4:15 p.m.1 views

CVE-2024-40395

An Insecure Direct Object Reference IDOR in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardless of access level...

6.5CVSS5.8AI score0.00332EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/08/27 12:0 a.m.10 views

CVE-2024-40395

An Insecure Direct Object Reference IDOR in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardless of access level...

6.8AI score0.00332EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/08/27 12:0 a.m.1 views

PTC ThingWorx 安全漏洞

PTC ThingWorx is a complete end-to-end technology platform designed for the Industrial Internet of Things IIoT from PTC Corporation, USA. A security vulnerability exists in PTC ThingWorx version v9.5.0 that stems from an insecure direct object reference that allows an attacker to view sensitive...

6.5CVSS6.6AI score0.00332EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/08/27 12:0 a.m.2 views

PT-2024-28827 · Ptc · Ptc Thingworx

Name of the Vulnerable Software and Affected Versions: PTC ThingWorx version 9.5.0 Description: An Insecure Direct Object Reference IDOR in PTC ThingWorx allows attackers to view sensitive information, including personally identifiable information PII, regardless of access level. Recommendations:...

6.5CVSS6.8AI score0.00332EPSS
Exploits0References6
Cvelist
Cvelist
added 2024/08/27 12:0 a.m.12 views

CVE-2024-40395

An Insecure Direct Object Reference IDOR in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardless of access level...

0.00332EPSS
Exploits0References1
CVE
CVE
added 2024/08/27 12:0 a.m.52 views

CVE-2024-40395

CVE-2024-40395 : Concrete details across multiple connected sources confirm an Insecure Direct Object Reference (IDOR) in PT C ThingWorx v9.5.0 that lets an attacker view sensitive information, including PII, regardless of access level. The root cause is an IDOR in ThingWorx 9.5.0; impact is expo...

6.5CVSS6.5AI score0.00332EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/08/16 2:57 p.m.18 views

CVE-2024-6098 PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling

When performing an online tag generation to devices which communicate using the ControlLogix protocol, a machine-in-the-middle, or a device that is not configured correctly, could deliver a response leading to unrestricted or unregulated resource allocation. This could cause a denial-of-service...

5.9CVSS0.00109EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/08/16 2:57 p.m.22 views

CVE-2024-6098 PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling

When performing an online tag generation to devices which communicate using the ControlLogix protocol, a machine-in-the-middle, or a device that is not configured correctly, could deliver a response leading to unrestricted or unregulated resource allocation. This could cause a denial-of-service...

5.9CVSS7.2AI score0.00109EPSS
Exploits0References2
ICS
ICS
added 2024/08/15 6:0 a.m.16 views

PTC Kepware ThingWorx Kepware Server

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.9 ATTENTION : Exploitable from adjacent network. Vendor : PTC Equipment : Kepware ThingWorx Kepware Server Vulnerability : Allocation of Resources Without Limits or Throttling 2. RISK EVALUATION Successful exploitation of this vulnerability could crash the...

5.9CVSS5.5AI score0.00109EPSS
Exploits0References10
ICS
ICS
added 2023/08/31 6:0 a.m.118 views

PTC Kepware KepServerEX (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : PTC Equipment : Kepware KepServerEX Vulnerabilities : Uncontrolled Search Path Element, Improper Input Validation, Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of...

7.8CVSS7.1AI score0.00071EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2023/08/31 12:0 a.m.2 views

PT-2023-5235 · Kepware +1 · Kepserverex +1

Name of the Vulnerable Software and Affected Versions: KEPServerEX versions affected versions not specified ThingWorx Kepware Server versions affected versions not specified Description: The issue is related to an uncontrolled search path element vulnerability, also known as DLL hijacking. This...

7.3CVSS7.2AI score0.0003EPSS
Exploits0References9
Rows per page
Query Builder