Lucene search
+L

7136 matches found

osv_ghsa
osv_ghsa
•added 2025/04/01 9:30 a.m.•83 views

GHSA-3W85-5P9G-H334 Apache ActiveMQ Artemis User Without Create Address Permissions can Modify Address Routing-Type

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...

4.3CVSS7AI score0.0064EPSS
SaveExploits0References7
NVD
NVD
•added 2025/04/01 8:15 a.m.•65 views

CVE-2025-27427

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...

4.3CVSS0.0064EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/04/01 7:26 a.m.•15 views

CVE-2025-27427 Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...

2.3CVSS6AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/04/01 7:26 a.m.•10 views

CVE-2025-27427 Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...

2.3CVSS7AI score0.0064EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/01 7:26 a.m.•67 views

CVE-2025-27427 Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...

2.3CVSS0.0064EPSS
SaveExploits0References1
Mend
Mend
•added 2025/04/01 7:26 a.m.•9 views

CVE-2025-27427

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...

4.3CVSS0.0064EPSS
SaveExploits0References10
CVE
CVE
•added 2025/04/01 7:26 a.m.•1147 views

CVE-2025-27427

CVE-2025-27427 affects Apache ActiveMQ Artemis 2.0.0–2.39.0. A user with createDurableQueue or createNonDurableQueue permissions can augment the routing-type of an address without createAddress permission, and with send permission plus automatic queue creation could send messages using a routing-...

4.3CVSS7AI score0.0064EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•22 views

Stormshield Network Security security vulnerabilities

Stormshield Network Security SNS is a next-generation UTM Unified Threat Management firewall from the French company Stormshield. A security vulnerability exists in Stormshield Network Security version 4.3.x prior to 4.3.35, which stems from a multicast stream that may result in a denial of servi...

7.3CVSS6.5AI score0.00297EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•23 views

Apache ActiveMQ Artemis security vulnerabilities

Apache ActiveMQ Artemis is a high-performance open source messaging agent from the Apache Foundation USA. A security vulnerability exists in Apache ActiveMQ Artemis versions 2.0.0 through 2.39.0, which stems from the ability of a user with createDurableQueue or createNonDurableQueue permissions t...

4.3CVSS4.8AI score0.0064EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•8 views

PT-2025-14369

Name of the Vulnerable Software and Affected Versions Stormshield Network Security versions 4.3.x through 4.3.34 Description The issue allows for the interruption of multicast traffic on some interfaces if multicast streams are enabled on different interfaces, potentially resulting in a denial of...

7.3CVSS0.00297EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•5 views

CVE-2025-27427: Incorrect Authorization

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...

4.3CVSS5.6AI score0.0064EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•7 views

CVE-2025-27829: Uncontrolled Resource Consumption

An issue was discovered in Stormshield Network Security SNS 4.3.x before 4.3.35. If multicast streams are enabled on different interfaces, it may be possible to interrupt multicast traffic on some of these interfaces. That could result in a denial of the multicast routing service on the firewall...

7.3CVSS5.8AI score0.00297EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•15 views

PT-2025-14017

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Artemis versions 2.0.0 through 2.39.0 Description A vulnerability exists in Apache ActiveMQ Artemis where a user with the createDurableQueue or createNonDurableQueue permission on an address can update the routing-type supporte...

5.2CVSS5.1AI score0.0064EPSS
SaveExploits0References20
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/03/25 7:03 a.m.•8 views

Malicious code in @mint-lib/routing-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97df96fcfd4afed289291f55c411b10293b85a52d658e3f35b74cc4969fc30df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2025/03/20 12:00 a.m.•19 views

Lunary authorization issue vulnerability

lunary is lunary open source a production toolkit for LLM . An authorization issue vulnerability exists in lunary that stems from /bigquery API routing without proper access control, no detailed vulnerability details are provided at this time...

9.8CVSS9.3AI score0.00734EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/03/18 6:59 p.m.•31 views

CVE-2025-25040 Failure to Properly Enforce Port ACLs on CPU generated packets in CX 9300 Switches

A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects: - AOS-CX 10.14.xxxx : All patches - AOS-CX 10.15.xxxx : 10.15.1000 and below The vulnerability is specific to traffic originated by the ...

3.3CVSS0.00137EPSS
SaveExploits0References1
osv_rlsa
osv_rlsa
•added 2025/03/17 8:16 p.m.•34 views

RLSA-2025:0377 Moderate: Security and bug fixes for NetworkManager

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

7.6CVSS6.5AI score0.04063EPSS
SaveExploits1References1
Rockylinux
Rockylinux
•added 2025/03/17 8:16 p.m.•19 views

Security and bug fixes for NetworkManager

An update is available for NetworkManager. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

7.6CVSS6.7AI score0.04063EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2025/03/17 12:00 a.m.•22 views

Windows RRAS Routing Remote Access Code Execution

The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.01486EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/03/15 11:21 a.m.•400 views

Exploit for OS Command Injection in Php

PHP-CGI Injector 🚀 CVE-2024-4577 & CVE-2024-8926 Exploit To...

9.8CVSS7.1AI score0.99987EPSS
SaveExploits72
Rows per page
Query Builder