Lucene search
+L

164 matches found

Snyk
Snyk
•added 2025/02/09 9:31 p.m.•10 views

Timing Attack

Overview OPCFoundation.NetStandard.Opc.Ua is a package that contains the OPC UA reference implementation and is targeting the .NET Standard Library. Affected versions of this package are vulnerable to Timing Attack when using the deprecated Basic128Rsa15 security policy disabled by default. This...

8.6CVSS6.9AI score0.00599EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/09 12:00 a.m.•4 views

PT-2025-6085

Name of the Vulnerable Software and Affected Versions OPC UA .NET Standard Stack versions prior to 1.5.374.158 Description The issue allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled. Recommendations For versions prio...

9CVSS0.00599EPSS
SaveExploits0References14
CVE
CVE
•added 2025/01/14 6:11 p.m.•194 views

CVE-2024-50338

Git Credential Manager (GCM) on Windows/macOS/Linux is affected by CVE-2024-50338 due to a newline handling mismatch with Git. GCM’s ReadLineAsync accepts LF, CRLF, and CR, while Git’s credential parsing forbids an isolated CR, enabling an attacker to craft a malicious remote URL (for example, ht...

7.4CVSS7.3AI score0.03239EPSS
SaveExploits0References8
Veracode
Veracode
•added 2024/10/25 5:45 p.m.•13 views

Memory Consumption

opcfoundation.netstandard.opc.ua is vulnerable to a Memory Consumption. The vulnerability is due to insufficient safeguards in the OPC UA .NET Standard Stack that fail to limit memory consumption during certain operations, allowing an attacker to trigger a rapid increase in memory usage, which ma...

6.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2024/10/18 8:05 p.m.•32 views

Security Update for the OPC UA .NET Standard Stack

This security update resolves a vulnerability in the OPC UA .NET Standard Stack that allows an unauthorized attacker to trigger a gradual degradation in performance...

5.3CVSS6.7AI score0.00504EPSS
SaveExploits0References4Affected Software2
OSV
OSV
•added 2024/10/18 8:05 p.m.•88 views

GHSA-7VFH-CQPC-4267 Security Update for the OPC UA .NET Standard Stack

This security update resolves a vulnerability in the OPC UA .NET Standard Stack that allows an unauthorized attacker to trigger a gradual degradation in performance...

5.3CVSS5.2AI score0.00504EPSS
SaveExploits0References4
Snyk
Snyk
•added 2024/10/18 8:05 p.m.•22 views

Allocation of Resources Without Limits or Throttling

Overview OPCFoundation.NetStandard.Opc.Ua is a package that contains the OPC UA reference implementation and is targeting the .NET Standard Library. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the improper handling of certain...

6.9CVSS6.9AI score0.00504EPSS
SaveExploits0References2
OSV
OSV
•added 2024/10/18 8:04 p.m.•14 views

GHSA-QM9F-C3V9-WPHV Security Update for the OPC UA .NET Standard Stack

This security update resolves a vulnerability in the OPC UA .NET Standard Stack that enables an unauthorized attacker to trigger a rapid increase in memory consumption...

7.5CVSS7.1AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/18 12:00 a.m.•2 views

PT-2024-40436

Name of the Vulnerable Software and Affected Versions OPC UA .NET Standard Stack affected versions not specified Description The issue allows an unauthorized attacker to cause a significant increase in memory consumption. Recommendations At the moment, there is no information about a newer versio...

7.5CVSS5.8AI score
SaveExploits0References3
Veracode
Veracode
•added 2024/07/09 6:15 a.m.•22 views

Denial Of Service (DOS)

OPCFoundation.NetStandard.Opc.Ua.Core is vulnerable to Denial Of Service. The vulnerability is due to improper buffer management when the system receives an excessive number of messages from a remote source, which could allow remote attackers to exhaust memory resources and potentially lead to a...

7.5CVSS7.1AI score0.00557EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2024/05/07 11:15 p.m.•11 views

CVE-2023-27321

OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard. Authentication is not required to exploit this...

7.5CVSS7.1AI score0.01047EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2024/05/07 11:15 p.m.•35 views

CVE-2023-27321

OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard. Authentication is not required to exploit this...

7.5CVSS7.5AI score0.01047EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/05/07 10:55 p.m.•20 views

CVE-2023-27321 OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability

OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard. Authentication is not required to exploit this...

7.5CVSS6.5AI score0.01047EPSS
SaveExploits1References2
Mend
Mend
•added 2024/05/07 10:55 p.m.•5 views

CVE-2023-27321

OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard. Authentication is not required to exploit this...

8.7CVSS0.01047EPSS
SaveExploits1References7
OSV
OSV
•added 2024/05/07 10:55 p.m.•13 views

CVE-2023-27321 OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability

OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard. Authentication is not required to exploit this...

7.5CVSS6AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/07 12:00 a.m.•3 views

CVE-2023-27321: Uncontrolled Resource Consumption

OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard. Authentication is not required to exploit this...

7.5CVSS7.3AI score0.01047EPSS
SaveExploits1References1
Prion
Prion
•added 2023/12/12 5:15 p.m.•34 views

Design/Logic Flaw

The OPC UA .NET Standard Reference Server before 1.4.371.86. places sensitive information into an error message that may be seen remotely...

5CVSS6.7AI score0.00794EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•8 views

CVE-2023-31048: Generation of Error Message Containing Sensitive Information

The OPC UA .NET Standard Reference Server before 1.4.371.86. places sensitive information into an error message that may be seen remotely...

5.3CVSS6AI score0.00794EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/12/12 12:00 a.m.•47 views

CVE-2023-31048

The OPC UA .NET Standard Reference Server before 1.4.371.86. places sensitive information into an error message that may be seen remotely...

5.4AI score0.00794EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/12/12 12:00 a.m.•9 views

CVE-2023-31048

The OPC UA .NET Standard Reference Server before 1.4.371.86. places sensitive information into an error message that may be seen remotely...

6.4AI score0.00794EPSS
SaveExploits0References3
Rows per page
Query Builder