EUVD-2022-6517

Malicious code in bioql PyPI...

EUVD-2022-6631

Malicious code in bioql PyPI...

EUVD-2022-6567

Malicious code in bioql PyPI...

EUVD-2024-53528

Malicious code in bioql PyPI...

EUVD-2022-6479

Malicious code in bioql PyPI...

EUVD-2022-6584

Malicious code in bioql PyPI...

CVE-2019-19802

In Gallagher Command Centre Server v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without...

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

GHSA-GVWQ-6FMX-28XM node-opcua-alarm-condition prototype pollution vulnerability

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

@frangoteam/fuxa (>=1.1.19, <=1.2.4), @frangoteam/fuxa-min (>=1.1.19, <=1.2.4) +14 more potentially affected by CVE-2024-57086 via node-opcua-alarm-condition (>=2.119.0, <=2.134.0)

node-opcua-alarm-condition NPM version =2.119.0, =1.1.19, =1.1.19, =2.3.1, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =0.1.0, =0.1.7 - node-red-contrib-opcua-test 0.0.3 and more Source cves: CVE-2024-57086 Source advisory:...

node-opcua-alarm-condition prototype pollution vulnerability

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

node-opcua 安全漏洞

node-opcua is a French Sterfive SAS open source implementation of an OPC UA stack written entirely in Typescript for NodeJS. A security vulnerability exists in node-opcua version v2.134.0, which stems from the fieldsToJson function containing a prototype contamination vulnerability...

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57086

The node-opcua-alarm-condition package (version v2.134.0 ) contains a prototype pollution vulnerability within the fieldsToJson function. An attacker can exploit this flaw by supplying a crafted payload to trigger a Denial of Service (DoS) . This vulnerability is transitive across several other p...

CVE-2024-57086: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2023-32174

Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability when the produ...

CVE-2023-7234

CVE-2023-7234 affects the OPC UA Server Toolkit by Integration Objects (versions 1.0.0 and prior). The vulnerability is described as Improper Output Neutralization for Logs (CWE-117): when an OPC UA client connects, the toolkit logs the client’s self-defined description field, which can allow an ...