19 matches found
PTC ThingWorx 安全漏洞
PTC ThingWorx is a complete end-to-end technology platform designed for the Industrial Internet of Things IIoT from PTC Corporation, USA. A security vulnerability exists in PTC ThingWorx version v9.5.0 that stems from an insecure direct object reference that allows an attacker to view sensitive...
CVE-2018-20092
PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request...
CVE-2018-20092
PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request...
CVE-2018-20092: Improper Limitation of a Pathname to a Restricted Directory
PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request...
PT-2018-15253
Name of the Vulnerable Software and Affected Versions PTC ThingWorx Platform versions prior to 8.3.1 Description The issue allows for a directory traversal attack on ZIP files via a POST request. This can potentially lead to unauthorized access to sensitive files and directories. Recommendations...
PTC ThingWorx Platform Cross-Site Scripting Vulnerability
The PTC ThingWorx Platform is a suite of platforms for developing and deploying industrial IoT applications and augmented reality AR. A cross-site scripting vulnerability exists in SQUEAL in PTC ThingWorx Platform versions 6.5 through 8.2. A remote attacker could exploit the vulnerability to...
CVE-2018-17217
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key...
CVE-2018-17218
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function...
Cross site scripting
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function...
CVE-2018-17216
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users...
CVE-2018-17218
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function...
CVE-2018-17218
PTC ThingWorx Platform versions 6.5–8.2 have a reflected XSS in the SQUEAL search function. A remote attacker can exploit via a specially crafted URL to execute script in a user’s browser. Affected component: SQUEAL search; vulnerability type: cross-site scripting. No remediation details are prov...
CVE-2018-17217
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key...
PT-2018-13952
Name of the Vulnerable Software and Affected Versions PTC ThingWorx Platform versions 6.5 through 8.2 Description An issue was discovered in the PTC ThingWorx Platform. There is a hardcoded encryption key. Recommendations For PTC ThingWorx Platform versions 6.5 through 8.2, consider updating to a...
PT-2018-13953
Name of the Vulnerable Software and Affected Versions PTC ThingWorx Platform versions 6.5 through 8.2 Description An issue was discovered in the SQUEAL search function, where there is reflected XSS. Recommendations For PTC ThingWorx Platform versions 6.5 through 8.2, update to a version that...
PT-2018-13951
Name of the Vulnerable Software and Affected Versions PTC ThingWorx Platform versions 6.5 through 8.2 Description An issue was discovered that exposes password hashes to privileged users. Recommendations For PTC ThingWorx Platform versions 6.5 through 8.2, update to a version that contains a fix...
CVE-2018-17218: Improper Neutralization of Input During Web Page Generation
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function...
CVE-2018-17216: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users...