Lucene search
+L

10 matches found

Positive Technologies
Positive Technologies
•added 2026/07/09 12:00 a.m.•8 views

PT-2026-59065

All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited numb...

7.5CVSS7.1AI score0.01583EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2022/08/24 12:00 a.m.•44 views

Uncontrolled Resource Consumption in node-opcua

The package node-opcua before 2.74.0 are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e.g. 2GB...

7.5CVSS2.1AI score0.01461EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2022/08/23 5:15 a.m.•38 views

CVE-2022-21208

The package node-opcua before 2.74.0 are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e.g. 2GB...

7.5CVSS0.01461EPSS
SaveExploits0References4
Mend
Mend
•added 2022/08/23 5:07 a.m.•8 views

CVE-2022-25888

The package opcua from 0.0.0 are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e.g. 2GB each...

8.7CVSS0.01321EPSS
SaveExploits0References4
Mend
Mend
•added 2022/08/23 5:07 a.m.•11 views

CVE-2022-25761

The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an...

8.7CVSS0.01445EPSS
SaveExploits0References7
Mend
Mend
•added 2022/08/23 5:06 a.m.•10 views

CVE-2022-21208

The package node-opcua before 2.74.0 are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e.g. 2GB...

8.7CVSS0.01461EPSS
SaveExploits0References6
Mend
Mend
•added 2022/08/23 5:05 a.m.•10 views

CVE-2022-25304

All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited numb...

8.7CVSS0.01583EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2022/08/23 5:05 a.m.•44 views

CVE-2022-25304 Denial of Service (DoS)

All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited numb...

7.5CVSS7.7AI score0.01583EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/23 12:00 a.m.•8 views

CVE-2022-25888: Allocation of Resources Without Limits or Throttling

The package opcua from 0.0.0 are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e.g. 2GB each...

7.5CVSS7.2AI score0.01321EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/23 12:00 a.m.•6 views

CVE-2022-25761: Allocation of Resources Without Limits or Throttling

The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an...

7.5CVSS7.2AI score0.01445EPSS
SaveExploits0References2
Rows per page
Query Builder