Vulnerabilities
Summary — last 7 days
New vulnerabilities4,628▼ 562 vs. last week
Critical / high1,829▼ 1,121 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)865▲ 767 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 0.85% | — | OPC UA Stack Project OPC UA Stack | 8/23/2022 | 6/17/2026 | All versions of package asneg/opcuastack are vulnerable to Denial of Service (DoS) due to a missing handler for failed casting when unvalidated data is forwarded to boost::get function in OpcUaNodeIdBase.h. Exploiting this vulnerability is possible when sending a specifically crafted OPC UA message with a special… | |
| Modified | High (7.5) | 0.98% | — | Asneg OPC UA Stack | 8/23/2022 | 6/17/2026 | All versions of package asneg/opcuastack are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without… |