Fedora 22 : activemq-5.6.0-12.fc22 (2015-701a1e1a5f)

fix for CVE-2015-6524 rhbz1257246,1257248 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

CVE-2015-6524

The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-361...

CVE-2014-3612

The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind. NOTE: this identifier...

CVE-2015-6524

The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-361...

CVE-2015-6524

CVE-2015-6524 affects Apache ActiveMQ 5.x, where the LDAPLoginModule in JAAS allows wildcard operators in usernames. This enables remote attackers to obtain credentials via brute-forcing usernames. The document set explicitly ties this vulnerability to ActiveMQ 5.x prior to 5.10.1 and notes the i...

CVE-2015-6524

The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-361...

CVE-2014-6524

Technical details for CVE-2014-6524 are not publicly available in the provided documents. No affected components, root cause, or remediation are specified here. Monitor for updates.

CVE-2012-6524

CVE-2012-6524 involves a SQL injection vulnerability in pGB 2.12, specifically in the kommentar.php component where the id parameter can be manipulated to execute arbitrary SQL commands remotely. Affected software: pGB 2.12. Root cause: unsafely handling user-supplied id parameter leading to SQL ...

CVE-2012-6524

creationtimestamp| type| source ---|---|--- 2012-01-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18383...

CVE-2008-6524

CVE-2008-6524 affects openInvoice up to version 0.90 beta and earlier. It allows remote authenticated users to change arbitrary user passwords via a modified uid parameter in resetpass.php. The description notes this can be leveraged with a separate vulnerability in auth.php to modify passwords w...

SuSE Update for opera SUSE-SA:2008:001

Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse2008001.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for opera SUSE-SA:2008:001 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

FreeBSD Ports: opera, opera-devel, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2007-6524

Technical details for CVE-2007-6524 are not provided in the connected documents. The initial description mentions a memory-content leak via BMP in Opera before 9.25, but no concrete affected versions, root cause, impact, or fixes are included here. Monitor for updates.

CVE-2006-6524

SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the Uname UserName parameter...

CVE-2006-6524

CVE-2006-6524 is a SQL injection vulnerability in EzHRS HR Assist prior to or including 1.05, occurring in vdateUsr.asp through the Uname (UserName) parameter. The issue arises from improper handling of user input, allowing remote attackers to execute arbitrary SQL commands. Public references inc...