Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 9:17 p.m.5 views

CVE-2021-32994

Softing OPC UA C++ SDK Software Development Kit versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locatio...

7.5CVSS6.8AI score0.00122EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2023/04/04 9:56 a.m.3 views

postgresql: Extension scripts replace objects not belonging to the extension.

A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the objec...

8CVSS6.9AI score0.00973EPSS
Exploits0References5
OSV
OSV
added 2022/08/24 5:15 a.m.0 views

CVE-2022-25903

The package opcua from 0.0.0 are vulnerable to Denial of Service DoS via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow even if the message size is less than the maximum allowed...

7.5CVSS5.8AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/08/24 12:0 a.m.4 views

PT-2022-17596 · Opcua · Opcua

Name of the Vulnerable Software and Affected Versions: opcua versions 0.0.0 through 0.11.0 Description: The issue allows for Denial of Service DoS via the ExtensionObjects and Variants objects. This occurs because the package allows unlimited nesting levels, which could result in a stack overflow...

7.5CVSS7.6AI score0.00611EPSS
Exploits0References8
OSV
OSV
added 2022/04/04 8:15 p.m.1 views

CVE-2021-32994

Softing OPC UA C++ SDK Software Development Kit versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locatio...

7.5CVSS5.8AI score0.00122EPSS
Exploits0References1
Prion
Prion
added 2022/04/04 8:15 p.m.9 views

Memory corruption

Softing OPC UA C++ SDK Software Development Kit versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locatio...

5CVSS7.4AI score0.00122EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/06/17 12:0 a.m.2 views

Softing OPC UA C++ SDK 缓冲区错误漏洞

The Softing OPC UA C++ SDK is a development kit from Softing Germany. It is used to quickly and easily integrate OPC UA clients and servers. A buffer error vulnerability exists in the Softing OPC-UA C++ SDK that stems from an exported library function that does not properly validate received...

7.5CVSS7.6AI score0.00122EPSS
Exploits0References5
Rows per page
Query Builder