118 matches found
PT-2026-105152
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only check vhost access; it omits the node/vhost/user connection-limit checks that rabbit reader performs for AMQP. A developer %% FIXME comment at the cited line explicitly acknowledges...
AZL-105762 CVE-2026-66067 affecting package rabbitmq-server for versions less than 3.13.7-10
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only checkvhostaccess; it omits the node/vhost/user connection-limit checks that rabbitreader performs for AMQP. A developer %% FIXME comment at the cited line explicitly acknowledges th...
DEBIAN-CVE-2026-66067
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only checkvhostaccess; it omits the node/vhost/user connection-limit checks that rabbitreader performs for AMQP. A developer %% FIXME comment at the cited line explicitly acknowledges th...
CVE-2026-66067
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only checkvhostaccess; it omits the node/vhost/user connection-limit checks that rabbitreader performs for AMQP. A developer %% FIXME comment at the cited line explicitly acknowledges th...
UBUNTU-CVE-2026-66067
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only checkvhostaccess; it omits the node/vhost/user connection-limit checks that rabbitreader performs for AMQP. A developer %% FIXME comment at the cited line explicitly acknowledges th...
CVE-2026-66067
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only checkvhostaccess; it omits the node/vhost/user connection-limit checks that rabbitreader performs for AMQP. A developer %% FIXME comment at the cited line explicitly acknowledges th...
PT-2026-97556
Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.2.7 RabbitMQ versions prior to 4.3.1 Description The stream open handler only executes check vhost access and fails to perform the node, vhost, and user connection-limit checks typically handled by rabbit reader fo...
CVE-2026-66067: Allocation of Resources Without Limits or Throttling
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only checkvhostaccess; it omits the node/vhost/user connection-limit checks that rabbitreader performs for AMQP. A developer %% FIXME comment at the cited line explicitly acknowledges th...
rabbitmq: RabbitMQ: Authenticated user can bypass connection limits via stream protocol
A flaw was found in RabbitMQ. The stream protocol handler does not correctly enforce per-user and per-virtual host vhost connection limits. An authenticated user can exploit this by connecting through port 5552, bypassing the intended connection restrictions. This could lead to resource exhaustio...
MINI-5552-VVHQ-VQH8
Bulletin has no description...
MINI-P292-VMQM-5552
Bulletin has no description...
MINI-HJCQ-CM26-5552
Bulletin has no description...
CVE-2026-5552
A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...
CVE-2026-5552
creationtimestamp| type| source ---|---|--- 2026-04-05 12:23:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqqj5qvbk24...
MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.121-0.b13.el7 (AXSA:2017-1273:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1273:01 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2016-5546 RESERVED This candidate has been reserved by an organization...
ECHO-5552-CE75-412D The issue is that a specific function is not thread safe, changing the umask for the whole process, meaning multiple uses of libarchive in different threads could cause a race condition that could have various consequences. The issue was fixed with added documentation that specifies that the function is not thread safe. https://github.com/libarchive/libarchive/issues/1876 https://security-tracker.debian.org/tracker/CVE-2023-30571 The documentation change which was merged to master https://github.com/libarchive/libarchive/pull/1875
Bulletin has no description...
CVE-2025-5552
CVE-2025-5552 affects ChestnutCMS up to version 15.1, targeting the API Endpoint’s file /dev-api/groovy/exec. The issue is a deserialization vulnerability that can be exploited remotely; exploitation details have been publicly disclosed. Several connected sources confirm this, including Red Hat a...
CVE-2013-5552
Cisco IOS 12.424MDB9 and earlier on Content Services Gateway CSG devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restrictions via a crafted series of packets, aka Bug ID CSCug90143...
CGA-55HF-PW3Q-5552
Bulletin has no description...
CVE-2024-5552
kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service ReDoS attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes th...