Azure Linux 3.0 Security Update: rabbitmq-server (CVE-2023-50966)

The version of rabbitmq-server installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-50966 advisory. - erlang-jose aka JOSE for Erlang and Elixir through 1.11.6 allow attackers to cause a denial of...

CBL Mariner 2.0 Security Update: rabbitmq-server (CVE-2023-50966)

The version of rabbitmq-server installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-50966 advisory. - erlang-jose aka JOSE for Erlang and Elixir through 1.11.6 allow attackers to cause a denial of...

CVE-2023-50966 affecting package rabbitmq-server for versions less than 3.11.24-2

CVE-2023-50966 affecting package rabbitmq-server for versions less than 3.11.24-2. A patched version of the package is available...

Azure Linux 3.0 Security Update: rabbitmq-server (CVE-2023-46118)

The version of rabbitmq-server installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-46118 advisory. - RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP reque...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0 <=3.7.2), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0 <=3.7.2) +3 more potentially affected by CVE-2024-57606 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0 <=3.7.2)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.6.3, =3.7.2 Source cves: CVE-2024-57606 Source advisory: OSV:GHSA-WFPM-QCHC-6CF9...

CVE-2024-1156

Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin-fips, openbao-fips, age, wgcf, neuvector-sigstore-interface, yunikorn-web, smarter-device-manager, kapp-controller-fips, k8s-device-plugin-fips, cadvisor, cass-operator-fips, k8ssandra-operator-fips, ytt-fips, trillian-fips, restic-fips,...

GHSA-FPW7-8GJC-JWQJ Cache confusion in Jenkins Eiffel Broadcaster Plugin

The Jenkins Eiffel Broadcaster Plugin allows events published to RabbitMQ to be signed using certificate credentials. To improve performance, the plugin caches some data from the credential. Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 both inclusive uses the credential ID as the cache key. Thi...

Cache confusion in Jenkins Eiffel Broadcaster Plugin

The Jenkins Eiffel Broadcaster Plugin allows events published to RabbitMQ to be signed using certificate credentials. To improve performance, the plugin caches some data from the credential. Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 both inclusive uses the credential ID as the cache key. Thi...

CVE-2025-24400

Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 both inclusive uses the credential ID as the cache key during signing operations, allowing attackers able to create a credential with the same ID as a legitimate one in a different credentials store to sign an event published to RabbitMQ with...

CVE-2025-24400

Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 both inclusive uses the credential ID as the cache key during signing operations, allowing attackers able to create a credential with the same ID as a legitimate one in a different credentials store to sign an event published to RabbitMQ with...

CVE-2025-24400

Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 both inclusive uses the credential ID as the cache key during signing operations, allowing attackers able to create a credential with the same ID as a legitimate one in a different credentials store to sign an event published to RabbitMQ with...

CVE-2025-24400

Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 both inclusive uses the credential ID as the cache key during signing operations, allowing attackers able to create a credential with the same ID as a legitimate one in a different credentials store to sign an event published to RabbitMQ with...

Jenkins plugin Eiffel Broadcaster 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

CBL Mariner 2.0 Security Update: rabbitmq-server (CVE-2023-46118)

The version of rabbitmq-server installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-46118 advisory. - RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP reque...

CVE-2024-45337 vulnerabilities

Vulnerabilities for packages: guac, openbao-fips, age, grafana-alloy, wgcf, neuvector-sigstore-interface, crossplane-provider-azure-sql, kapp-controller-fips, crossplane-provider-aws-memorydb, cadvisor, crossplane-provider-aws-rds, external-dns, trillian-fips, restic-fips, prometheus-pushgateway,...

CVE-2023-46118 affecting package rabbitmq-server for versions less than 3.11.24-1

CVE-2023-46118 affecting package rabbitmq-server for versions less than 3.11.24-1. An upgraded version of the package is available that resolves this issue...

Ubuntu: Security Advisory (USN-7143-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7143-1 rabbitmq-server vulnerabilities

Christian Rellmann discovered that RabbitMQ Server did not properly sanitize user input when adding a new user via the management UI. An attacker could possibly use this issue to perform cross site scripting and obtain sensitive information. CVE-2021-32718 Fahimhusain Raydurg discovered that...

USN-7143-1: RabbitMQ Server vulnerabilities

Christian Rellmann discovered that RabbitMQ Server did not properly sanitize user input when adding a new user via the management UI. An attacker could possibly use this issue to perform cross site scripting and obtain sensitive information. CVE-2021-32718 Fahimhusain Raydurg discovered that...