CVE-2025-40744

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 11. Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in several products such as Altair Grid Engine, COMOS, LOGO, SICAM, SIDOOR, SIMATIC, SIPLUS, Spectrum Power and Solid Edge. The vulnerabilities potentially enable a malicious person to carry out attacks that can lead to the following categories of damage: -...

Malicious code in solid_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6103ab41caa51fee5ac13214902442654827b219a889dc9ef9431a8b9f1f1869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78273

Malicious code in solidjaguarz3n npm...

EUVD-2025-80513

Malicious code in solidsquiddumbs npm...

EUVD-2025-73622

Malicious code in solidmooserequirement npm...

Malicious code in solid_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2e7d57162615712e6bcbd4242208ecfffc6b2851825418e700f24d731204f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solid_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b3009b82db6f2b27c9a05023aecaba792fd2b856d75d89dc5bd4831c9e0ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73624

Malicious code in solidcatz3n npm...

PT-2025-46544

Name of the Vulnerable Software and Affected Versions Siemens Software Center versions prior to 3.5 Solid Edge SE2025 versions prior to 225.0 Update 10 Description The software is susceptible to a DLL hijacking issue. An attacker could potentially execute arbitrary code by placing a specially...

Siemens Software Center和Siemens Solid Edge SE2025 代码问题漏洞

Siemens Software Center and Siemens Solid Edge SE2025 are both products of Siemens, a German company.Siemens Software Center is a product. Siemens Software Center is a product that provides a simple, unified tool that enables customers to manage software delivery and implementation.Siemens Solid...

PT-2025-46538

Name of the Vulnerable Software and Affected Versions Solid Edge SE2025 versions prior to V225.0 Update 11 Description The application does not properly validate client certificates when connecting to the License Service endpoint. This could allow a remote attacker to perform man-in-the-middle...

Siemens Solid Edge SE2025 信任管理问题漏洞

Siemens Solid Edge SE2025 is a development software from Siemens Germany. A trust management issue vulnerability exists in versions prior to Siemens Solid Edge SE2025 V225.0 Update 11, which stems from not properly validating client certificates and could lead to a man-in-the-middle attack...

Siemens Solid Edge

SUMMARY Solid Edge is affected by improper certificate validation while connecting to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released a new version for Solid Edge SE2025 and recommends to update to the...

Siemens Software Center and Solid Edge

SUMMARY Siemens Software Center and Solid Edge is affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system. Siemens has released new versions for the affected products and recommends to update to the latest...

EUVD-2025-45223

Malicious code in solidsquidz3n npm...

MAL-2025-58751 Malicious code in solid_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1b6fec31e904e133b5b1d4321b54890a2babefef16de3396f31c380d3e3dd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens Solid Edge Multiple Vulnerabilities (SSA-541582)

The version of Siemens Solid Edge installed on the remote Windows host is prior to SE2024 V224.0 Update 14 or SE2025 V225.0 Update 6. It is, therefore, affected by multiple vulnerabilities as disclosed in the SSA-541582 vendor advisory: - The affected applications contains an out of bounds write...

CVE-2025-40812

A vulnerability has been identified in Solid Edge SE2024 All versions V224.0 Update 14, Solid Edge SE2025 All versions V225.0 Update 6. The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the...

CVE-2025-40811

A vulnerability has been identified in Solid Edge SE2024 All versions V224.0 Update 14, Solid Edge SE2025 All versions V225.0 Update 6. The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the...