Lucene search
+L

3203 matches found

OpenVAS
OpenVAS
•added 2022/01/16 12:00 a.m.•24 views

Fedora: Security Advisory for python-kombu (FEDORA-2022-1dae017601)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.03877EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/01/16 12:00 a.m.•25 views

Fedora: Security Advisory for python-celery (FEDORA-2022-1dae017601)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.03877EPSS
SaveExploits1References2
Veracode
Veracode
•added 2022/01/05 6:23 p.m.•1574 views

Remote Code Execution (RCE)

RabbitMQ is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the...

4.8CVSS3.3AI score0.01416EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2022/01/05 6:23 p.m.•48 views

Remote Code Execution (RCE)

RabbitMQ is vulnerable to Regular Expression Denial Of Service ReDoS. A new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper...

5.4CVSS5.4AI score0.01432EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
•added 2021/12/23 12:00 a.m.•50 views

Fresenius Kabi Agilia Connect Infusion System has an unspecified vulnerability

Fresenius Kabi Agilia Connect Infusion System is an infusion system from the German company Fresenius Kabi.A security vulnerability exists in the Fresenius Kabi Agilia Connect Infusion System, which could be exploited by an attacker to emulate a user to manipulate RabbitMQ queues and messages...

6.5CVSS3.4AI score0.00218EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/12/21 12:00 a.m.•24 views

Fresenius Kabi Agilia Connect Infusion System 安全漏洞

Fresenius Kabi Agilia Connect Infusion System is an infusion system from the German company Fresenius Kabi.A security vulnerability exists in the Fresenius Kabi Agilia Connect Infusion System, which could be exploited by an attacker to emulate a user to manipulate RabbitMQ queues and messages...

6.5CVSS5.6AI score0.00218EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/12/17 12:00 a.m.•15 views

The vulnerability of the toString() method implementation in the Spring AMQP RabbitMQ messaging application allows a attacker to cause a service failure.

The vulnerability of the toString method implementation in the Spring AMQP RabbitMQ messaging application is related to the restoration of unreliable data in memory during the processing of Dictionary objects from the java.util class. Exploiting this vulnerability could allow an attacker to cause...

6.5CVSS6.5AI score0.01052EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2021/12/10 5:15 p.m.•61 views

GHSA-V525-C3G5-CG9P Unsafe Deserialization that can Result in Code Execution

JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data...

9.8CVSS9.7AI score0.02844EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2021/11/02 12:00 a.m.•17 views

The vulnerability of the RabbitMQ messaging broker, related to the lack of protective measures for the website structure, allows attackers to compromise data integrity.

The vulnerability of the RabbitMQ messaging broker is related to improper validation of user input. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

4.8CVSS5.7AI score0.01165EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/11/02 12:00 a.m.•20 views

The vulnerability of the RabbitMQ message broker’s web-management plugin, related to insufficient processing of the format string, allows a attacker to trigger a service failure.

The vulnerability of the plugin for the RabbitMQ message broker’s web management system is related to an error in the HTTP header “X-Reason”. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS5.8AI score0.04397EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/10/29 12:00 a.m.•15 views

The vulnerability of the AMQP 1.0 message broker plugin of RabbitMQ, related to insufficient input validation, allows a attacker to trigger a service failure.

The vulnerability of the AMQP 1.0 message broker plugin of RabbitMQ is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to cause service failures by sending malicious AMQP messages...

7.5CVSS5.8AI score0.01387EPSS
SaveExploits0References8Affected Software3
OSV
OSV
•added 2021/10/21 6:15 p.m.•16 views

CVE-2021-35227

The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available...

7.8CVSS7.1AI score0.00476EPSS
SaveExploits0References2
NVD
NVD
•added 2021/10/21 6:15 p.m.•31 views

CVE-2021-35227

The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available...

7.8CVSS0.00476EPSS
SaveExploits0References2
Prion
Prion
•added 2021/10/21 6:15 p.m.•28 views

Design/Logic Flaw

The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available...

4.6CVSS7.5AI score0.00476EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/10/21 5:41 p.m.•38 views

CVE-2021-35227 Insecure Web Configuration for RabbitMQ Management Plugin in SolarWinds ARM

The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available...

4.7CVSS7.8AI score0.00476EPSS
SaveExploits0References2
CVE
CVE
•added 2021/10/21 5:41 p.m.•70 views

CVE-2021-35227

CVE-2021-35227 affects SolarWinds ARM with RabbitMQ Plugin on version 2020.2.6, where the HTTP interface was enabled and HTTPS configuration was unavailable. The issue arises from exposing an HTTP management interface without HTTPS configuration. CVSS data in sources show a high impact (CVSS3.1 b...

7.8CVSS5.9AI score0.00476EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2021/10/21 12:00 a.m.•5 views

PT-2021-20850

Name of the Vulnerable Software and Affected Versions: ARM version 2020.2.6 Description: The HTTP interface was enabled for RabbitMQ Plugin in ARM, and the ability to configure HTTPS was not available. Recommendations: For ARM version 2020.2.6, consider disabling the HTTP interface for the Rabbit...

7.8CVSS0.00476EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/10/21 12:00 a.m.•15 views

Pivotal Software RabbitMQ 代码问题漏洞

Pivotal Software RabbitMQ is a suite of open source message broker software from Pivotal Software, USA that implements the Advanced Message Queuing Protocol AMQP. A code issue vulnerability exists in RabbitMQ that stems from the software only enabling the HTTP interface and not being able to...

7.8CVSS7.5AI score0.00476EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/21 12:00 a.m.•9 views

CVE-2021-35227: Improper Neutralization of Input During Web Page Generation

The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available...

7.8CVSS5.8AI score0.00476EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/10/10 12:00 a.m.•21 views

openSUSE: Security Advisory for rabbitmq-server (openSUSE-SU-2021:3325-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS6.5AI score0.01432EPSS
SaveExploits2References2
Rows per page
Query Builder