Lucene search
+L

18 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•7 views

CVE-2026-97472: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: fix temp address generation after prefix deprecation When a router temporarily deprecates an IPv6 prefix either by sending a Router Advertisement with Preferred Lifetime = 0 or by letting the lifetime expire and...

5.8AI score0.00166EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/04/16 3:32 p.m.•18 views

Apache Artemis: Apache ActiveMQ Artemis: Apache Artemis and Apache ActiveMQ Artemis: Unauthorized address creation due to incorrect authorization during JMS topic subscription.

A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An authenticated user can exploit this incorrect authorization vulnerability by attempting to create a non-durable Java Message Service JMS topic subscription on an address that does not exist. If the user has "createDurableQueue"...

4.3CVSS5.7AI score0.00556EPSS
SaveExploits0References6
Veracode
Veracode
•added 2026/03/28 5:05 a.m.•18 views

Incorrect Authorization

Apache Artemis is vulnerable to Incorrect Authorization. The vulnerability is due to incorrect authorization, where an authenticated user with the 'createDurableQueue' permission but without the 'createAddress' permission can create a temporary address when attempting to create a non-durable JMS...

4.3CVSS5.2AI score0.00556EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2026/03/24 11:54 a.m.•18 views

CVE-2026-32642

A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An authenticated user can exploit this incorrect authorization vulnerability by attempting to create a non-durable Java Message Service JMS topic subscription on an address that does not exist. If the user has "createDurableQueue"...

4.3CVSS5.7AI score0.00556EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/03/24 9:30 a.m.•14 views

EUVD-2026-14782

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

2.3CVSS5.8AI score0.00556EPSS
SaveExploits0References3
OSV
OSV
•added 2026/03/24 9:30 a.m.•16 views

GHSA-F4GC-MWRG-Q36R Apache Artemis: Unauthorized Temporary Address Creation via OpenWire Protocol

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

2.3CVSS5.8AI score0.00556EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/03/24 9:30 a.m.•15 views

Apache Artemis: Unauthorized Temporary Address Creation via OpenWire Protocol

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

4.3CVSS5.8AI score0.00556EPSS
SaveExploits0References4Affected Software2
NVD
NVD
•added 2026/03/24 8:16 a.m.•13 views

CVE-2026-32642

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

4.3CVSS0.00556EPSS
SaveExploits0References2
OSV
OSV
•added 2026/03/24 8:16 a.m.•33 views

UBUNTU-CVE-2026-32642

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

4.3CVSS5.8AI score0.00556EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/03/24 7:53 a.m.•8 views

CVE-2026-32642

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

2.3CVSS5.8AI score0.00556EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2026/03/24 7:53 a.m.•44 views

CVE-2026-32642 Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

2.3CVSS0.00556EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/24 7:53 a.m.•16 views

CVE-2026-32642 Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

2.3CVSS6AI score
SaveExploits0References5
CVE
CVE
•added 2026/03/24 7:53 a.m.•127 views

CVE-2026-32642

CVE-2026-32642 is an authorization bypass in Apache Artemis/ActiveMQ Artemis OpenWire handling: when an authenticated user with createDurableQueue but without createAddress attempts to create a non-durable JMS topic subscription on a non-existent address and address auto-creation is disabled, a t...

4.3CVSS5.8AI score0.00556EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/24 7:53 a.m.•18 views

CVE-2026-32642 Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

2.3CVSS5.8AI score0.00556EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/21 12:00 a.m.•15 views

PT-2026-26884

Name of the Vulnerable Software and Affected Versions Apache Artemis versions 2.50.0 through 2.52.0 Apache ActiveMQ Artemis versions 2.0.0 through 2.44.0 Description An authorization issue exists in Apache Artemis and Apache ActiveMQ Artemis. Specifically, when an application utilizing the OpenWi...

4.3CVSS5.2AI score0.00556EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•13 views

The vulnerability of the Linux operating system allows a malicious individual to gain access to protected information or cause service failures.

When processing temporary IPv6 addresses, an error occurs. As a result, users from the same local network may experience service failure or access protected information by sending messages to the router that disable the creation of temporary addresses...

3.2CVSS7.2AI score0.01662EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2014/04/24 12:00 a.m.•55 views

DSA-2906-1 linux-2.6 - several

Bulletin has no description...

10CVSS8AI score0.10385EPSS
SaveExploits14
OSV
OSV
•added 2013/02/28 7:55 p.m.•10 views

DEBIAN-CVE-2013-0343

The ipv6createtempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service excessive retries and address-generation outage, and consequently...

3.2CVSS7.1AI score0.01662EPSS
SaveExploits0References1
Rows per page
Query Builder