Lucene search
+L

30 matches found

OSV
OSV
•added 2026/09/28 9:17 p.m.•9 views

CVE-2026-84895

In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSessionBase::closeSession method. The base method notifies the session handler, which may release the last reference to the session and destroy it...

7.3CVSS5.9AI score
SaveExploits0References2
NVD
NVD
•added 2026/09/28 9:17 p.m.•9 views

CVE-2026-84895

In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSessionBase::closeSession method. The base method notifies the session handler, which may release the last reference to the session and destroy it...

7.3CVSS0.00195EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/28 8:44 p.m.•34 views

CVE-2026-84895

In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSessionBase::closeSession method. The base method notifies the session handler, which may release the last reference to the session and destroy it...

0.00195EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/28 8:44 p.m.•18 views

CVE-2026-84895

The proxygen software (versions 2026.04.06.00 through 2026.09.28.00 ) is vulnerable to a use-after-free condition in the QuicWtSession::closeSession function. The flaw occurs because the function accesses member fields after invoking the base QuicWtSessionBase::closeSession method, which may noti...

7.3CVSS5.9AI score0.00195EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/28 8:44 p.m.•7 views

EUVD-2026-88543

In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSessionBase::closeSession method. The base method notifies the session handler, which may release the last reference to the session and destroy it...

5.9AI score0.00195EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•3 views

PT-2026-102367

Name of the Vulnerable Software and Affected Versions proxygen versions 2026.04.06.00 through 2026.09.28.00 Description A use-after-free issue exists where the QuicWtSession::closeSession function accesses member fields after invoking the base QuicWtSessionBase::closeSession method. Because the...

7.3CVSS6AI score0.00195EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-29199

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00918EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-6805

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.01277EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2022-6631

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.01635EPSS
SaveExploits0References6
NVD
NVD
•added 2022/09/08 5:15 a.m.•58 views

CVE-2022-25897

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

7.5CVSS0.01277EPSS
SaveExploits0References4
Prion
Prion
•added 2022/09/08 5:15 a.m.•37 views

Design/Logic Flaw

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

5CVSS7.6AI score0.01277EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2022/09/08 5:05 a.m.•65 views

CVE-2022-25897 Denial of Service (DoS)

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

5.9CVSS7.7AI score0.01277EPSS
SaveExploits0References4
CVE
CVE
•added 2022/09/08 5:05 a.m.•139 views

CVE-2022-25897

The CVE-2022-25897 issue affects the Eclipse Milo SDK-Server (org.eclipse.milo:sdk-server) prior to version 0.6.8. The root cause is a memory‑consumption bypass in CloseSession handling when deleteSubscription is False, allowing a denial of service via repeated CloseSession requests. The Red Hat ...

7.5CVSS6.6AI score0.01277EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2022/09/08 5:05 a.m.•2 views

CVE-2022-25897

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

8.2CVSS0.01277EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/09/08 12:00 a.m.•21 views

Eclipse Milo 安全漏洞

Eclipse Milo is an open source implementation of OPC UA IEC 62541 from the Eclipse Foundation. A security vulnerability exists in Eclipse Milo sdk-server versions prior to 0.6.8, which originates from a denial of service when the memory footprint limit is bypassed by sending multiple CloseSession...

7.5CVSS7.2AI score0.01277EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2022/09/08 12:00 a.m.•27 views

PT-2022-17593 · Eclipse · Org.Eclipse.Milo:Sdk-Server

Name of the Vulnerable Software and Affected Versions: org.eclipse.milo:sdk-server versions prior to 0.6.8 Description: The issue allows for a Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscriptio...

7.5CVSS7.3AI score0.01277EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/08 12:00 a.m.•4 views

CVE-2022-25897: Allocation of Resources Without Limits or Throttling

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

7.5CVSS7.2AI score0.01277EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2022/08/25 12:00 a.m.•32 views

node-opcua DoS when bypassing limitations for excessive memory consumption

The package node-opcua before 2.74.0 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

7.5CVSS2.5AI score0.01635EPSS
SaveExploits0References6Affected Software1
Prion
Prion
•added 2022/08/24 5:15 a.m.•25 views

Design/Logic Flaw

The package node-opcua before 2.74.0 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

5CVSS7.5AI score0.01635EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2022/08/24 5:05 a.m.•31 views

CVE-2022-24375 Denial of Service (DoS)

The package node-opcua before 2.74.0 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

7.5CVSS7.7AI score0.01635EPSS
SaveExploits0References4
Rows per page
Query Builder