Lucene search
+L

1773 matches found

Check Point Advisories
Check Point Advisories
added 2019/09/09 12:0 a.m.9 views

Apache ActiveMQ Plugin Remote Code Execution (CVE-2015-5254)

An insecure deserialization vulnerability exists in ActiveMQ server. This vulnerability is due to deserialization of untrusted data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS6.1AI score0.38191EPSS
SaveExploits4
Github Security Blog
Github Security Blog
added 2019/08/01 7:17 p.m.33 views

Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client...

4CVSS3.7AI score0.01966EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2019/08/01 7:17 p.m.9 views

GHSA-JVPP-HXJJ-5CCC Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client...

4.9CVSS6.3AI score0.01966EPSS
SaveExploits0References5
NVD
NVD
added 2019/08/01 2:15 p.m.22 views

CVE-2015-7559

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client...

4CVSS3.9AI score0.01966EPSS
SaveExploits0References2
OSV
OSV
added 2019/08/01 2:15 p.m.5 views

DEBIAN-CVE-2015-7559

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client...

2.7CVSS6.9AI score0.01966EPSS
SaveExploits0References1
OSV
OSV
added 2019/08/01 2:15 p.m.11 views

CVE-2015-7559

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client...

2.7CVSS3.5AI score0.01966EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2019/08/01 2:15 p.m.31 views

CVE-2015-7559

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client...

4CVSS6.3AI score0.01966EPSS
SaveExploits0References3
Prion
Prion
added 2019/08/01 2:15 p.m.17 views

Command injection

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client...

4CVSS7AI score0.01966EPSS
SaveExploits0References2Affected Software3
OSV
OSV
added 2019/08/01 2:15 p.m.4 views

UBUNTU-CVE-2015-7559

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client...

4.9CVSS6.2AI score0.01966EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2019/08/01 12:0 a.m.9 views

PT-2019-7207 · Apache +2 · Apache Activemq +2

Name of the Vulnerable Software and Affected Versions: Apache ActiveMQ client versions prior to 5.15.5 Description: A remote shutdown command in the ActiveMQConnection class was exposed, allowing an attacker logged into a compromised broker to achieve denial of service on a connected client...

10CVSS7.2AI score0.99654EPSS
SaveExploits33References47
CVE
CVE
added 2019/08/01 12:0 a.m.190 views

CVE-2015-7559

CVE-2015-7559: Apache ActiveMQ client before 5.14.5 exposes a remote shutdown command in ActiveMQConnection, enabling a remote authenticated attacker to cause denial of service on a connected client. Affected software is the Apache ActiveMQ client (pre-5.14.5). Remediation: upgrade to 5.14.5 or l...

4CVSS3.8AI score0.01966EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/08/01 12:0 a.m.34 views

CVE-2015-7559

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client...

2.7CVSS3.8AI score0.01966EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2019/08/01 12:0 a.m.40 views

CVE-2015-7559

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client...

4CVSS5.3AI score0.01966EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/07/17 12:0 a.m.47 views

Oracle Enterprise Manager Cloud Control (Jul 2019 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component: - An unspecified vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite...

8.8CVSS6.5AI score0.17139EPSS
SaveExploits0References7
Gitee
Gitee
added 2019/05/19 10:44 a.m.7 views

Exploit for Improper Input Validation in Redhat Openshift

This is a pre-built vulnerable environment based on Docker-Compose, provided by the Vulhub project. The project is designed to help users learn about vulnerabilities and improve their defensive skills. The repository contains a collection of vulnerable environments, each with its own Docker-Compo...

9.8CVSS7AI score0.38191EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:0 a.m.8 views

The vulnerability of the Apache ActiveMQ software platform, related to security configuration errors, allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the Apache ActiveMQ software platform is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to execute a “man-in-the-middle” attack remotely...

7.4CVSS7.2AI score0.0699EPSS
SaveExploits0References5Affected Software5
vulnersOsv
vulnersOsv
added 2019/05/14 4:2 a.m.7 views

activemq:activemq (=1.1), activemq:activemq-optional (=3.2) +325 more potentially affected by CVE-2019-0227 via axis:axis (>=1.2 <=1.4)

axis:axis MAVEN version =1.2, =1.2.5, =1.1.0, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.6.4 and more Source cves: CVE-2019-0227 Source advisory: OSV:GHSA-H9GJ-RQRW-X4FQ...

7.5CVSS6.7AI score0.9194EPSS
SaveExploits7
OpenVAS
OpenVAS
added 2019/05/06 12:0 a.m.53 views

Apache ActiveMQ < 5.15.9 DoS Vulnerability - Windows

In Apache ActiveMQ unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.5CVSS7.6AI score0.12357EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/05/06 12:0 a.m.40 views

Apache ActiveMQ < 5.15.9 DoS Vulnerability - Linux

In Apache ActiveMQ unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.5CVSS7.6AI score0.12357EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2019/04/16 5:10 a.m.31 views

Security Bulletin: Vulnerability in Apache ActiveMQ Affects IBM Control Center (CVE-2019-0222)

Summary IBM Control center is affected by a Corrupt MQTT frame that can cause broker shutdown in Apache ActiveMQ. Vulnerability Details CVEID: CVE-2019-0222 DESCRIPTION: IBM Control center is affected by a Corrupt MQTT frame that can cause broker shutdown in Apache ActiveMQ. CVSS Base Score: 7.5...

7.5CVSS1.3AI score0.12357EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder