Graylog2__graylog2-server_CVE-2023-41044_5-1-2

Graylog 欢迎！ Graylog 是一个开源日志管理平台。 您可以在我们的官方网站上了解更多项目信息，并在文档站点查阅文档。 问题追踪 发现了一个 Bug？有改进的想法？欢迎提交问题。 贡献 帮助我们构建日志管理的未来，并参与到一个每天被成千上万人使用的项目中。 请遵循贡献者指南并阅读贡献说明以开始。 想要获得报酬来开发我们的开源产品？申请我们的职位！ 保持联系 欢迎加入 freenode IRC 上的 graylog 频道、libera 上的 graylog 频道，或在我们的社区论坛中创建话题与我们聊天。 许可证 Graylog 基于 服务器端公共许可证 SSPL 的第 1 版发...

ROOT-APP-MAVEN-CVE-2026-41044 CVE-2026-41044 in org.apache.activemq:activemq-broker - Patched by Root

Root has patched CVE-2026-41044 in the org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...

CVE-2026-41044 vulnerabilities

Vulnerabilities for packages: geoserver...

DEBIAN-CVE-2026-41044

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All. An authenticated attacker can use the admin web console page to construct a malicious broker name that bypasses name validation to...

UBUNTU-CVE-2026-41044

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All. An authenticated attacker can use the admin web console page to construct a malicious broker name that bypasses name validation to...

CVE-2026-41044

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All. An authenticated attacker can use the admin web console page to construct a malicious broker name that bypasses name validation to...

CVE-2026-41044

creationtimestamp| type| source ---|---|--- 2026-04-23 18:30:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mk6nfceoup2i 2026-04-24 22:06:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkbjwdmqjf2c 2026-05-05 12:00:05+00:00| seen|...

PT-2026-34867

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions prior to 5.19.6 Apache ActiveMQ versions 6.0.0 through 6.2.4 Apache ActiveMQ Broker versions prior to 5.19.6 Apache ActiveMQ Broker versions 6.0.0 through 6.2.4 Apache ActiveMQ All versions prior to 5.19.6 Apache...

EUVD-2025-41044

Malicious code in fauzi-tahu100-miaww npm...

CVE-2025-41044

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataPagename' parameter in /apprain/page/manage-static-pages/create...

CVE-2025-41044

creationtimestamp| type| source ---|---|--- 2025-09-04 11:27:39+00:00| seen| Telegram/FatR2RFi9g-L8hOGxdSQfgDOlTnIWcq7g0w89KqY0rBr0...

CVE-2024-41044

creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

CVE-2023-41044

Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's Support Bundle feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Graylog's Support Bundle feature allows an attacker with valid Admin role...

Linux Distros Unpatched Vulnerability : CVE-2024-41044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ppp: reject claimed-as-LCP but actually malformed packets Since 'pppasyncencode' assumes valid LCP packets with code from 1 to 7 inclusive, add 'pppcheckpacket'...

USN-7003-4: Linux kernel vulnerabilities

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service system crash. CVE-2024-40902 Several security issues were discovered in the Linux kernel. An attacker could...

RHEL 8 : kernel (RHSA-2024:6993)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6993 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: uio: Fix use-after-free in...

RockyLinux 9 : kernel (RLSA-2024:6567)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:6567 advisory. kernel: efivarfs: force RO when remounting if SetVariable is not supported CVE-2023-52463 kernel: nfsd: fix RELEASELOCKOWNER CVE-2024-26629 kernel: mm:...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7009-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7009-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use...

RHEL 9 : kernel (RHSA-2024:6567)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6567 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: efivarfs: force RO when...

ALSA-2024:6567 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: efivarfs: force RO when remounting if SetVariable is not supported CVE-2023-52463 kernel: nfsd: fix RELEASELOCKOWNER CVE-2024-26629 kernel: mm: cachestat: fix folio read-after-free in cac...