VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

402,263 vulnerabilities · 1,766 actively exploited (CISA KEV)

kepware kepserverex ✕Clear filters

9 results

ID	Severity	Summary	Published
CVE-2023-29447	MEDIUM5.3	An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication.	10/01/2024
CVE-2023-29446	MEDIUM4.7	An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them offline.	10/01/2024
CVE-2023-29445	HIGH7.8	An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.	10/01/2024
CVE-2023-29444