Samsung Security Manager ActiveMQ Broker Service MOVE Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Security Manager. Authentication is not required to exploit this vulnerability. Successful exploitation allows an attacker to gain complete control of the system on which the product is...

Samsung Security Manager ActiveMQ Broker Service PUT Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Security Manager. Authentication is not required to exploit this vulnerability. Successful exploitation allows an attacker to gain complete control of the system on which the product is...

Samsung Security Manager Security Bypass Vulnerability

Samsung Security Manager is a centralized management platform for video recording devices from Samsung in South Korea, which supports site group management, displaying a list of registered devices, and enabling playback of specified video borders through mouse drag-and-drop or double-click...

Moderate: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.1.0 security and bug fix update

Red Hat JBoss Fuse and A-MQ 6.1.0 Rollup Patch 2 R2, which includes several bug fixes, enhancements, and resolves two security issues, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring...

CVE-2015-1499

The ActiveMQ Broker in Samsung Security Manager SSM before 1.31 allows remote attackers to delete arbitrary files, and consequently cause a denial of service, via a DELETE request...

Cross site request forgery (csrf)

The ActiveMQ Broker in Samsung Security Manager SSM before 1.31 allows remote attackers to delete arbitrary files, and consequently cause a denial of service, via a DELETE request...

CVE-2015-1499

The ActiveMQ Broker in Samsung Security Manager SSM before 1.31 allows remote attackers to delete arbitrary files, and consequently cause a denial of service, via a DELETE request...

CVE-2015-1499

The CVE-2015-1499 entry concerns the Samsung Security Manager (SSM) ActiveMQ Broker. Affected version: SSM before 1.31. Vulnerability arises in the ActiveMQ Broker where remote attackers can delete arbitrary files via a DELETE request, enabling a denial-of-service condition. Public-source details...

Apache ActiveMQ Web Console Default Credentials

ActiveMQ Web Console, an administrative interface for Apache ActiveMQ, is protected using default credentials. Note that no authentication mechanism was provided prior to version 5.4.0. However, in version 5.4.0, HTTP Basic Authentication was an option, and starting with version 5.8.0, this was...

Apache ActiveMQ 5.x < 5.10.1 / 5.11.0 Multiple Vulnerabilities

The version of Apache ActiveMQ running on the remote host is 5.x prior to 5.10.1 / 5.11.0. It is, therefore, potentially affected by multiple vulnerabilities : - An unauthenticated, remote attacker can crash the broker listener by sending a packet to the same port that a message consumer or produ...

CVE-2014-8110

Multiple cross-site scripting XSS vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-8110

Multiple cross-site scripting XSS vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-8110

Multiple cross-site scripting XSS vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-8110

Apache ActiveMQ (5.x) prior to 5.10.1 is affected by cross-site scripting in the web-based admin console (CVE-2014-8110). Attacks could inject script/HTML via unspecified vectors and, per related IBM advisories, could lead to credential theft via cookies. Remote exploitation is possible if expose...

CVE-2014-8110

Multiple cross-site scripting XSS vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-4003 · Apache · Apache Activemq

Name of the Vulnerable Software and Affected Versions: Apache ActiveMQ versions prior to 5.10.1 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the web-based administration console. These vulnerabilities allow remote attackers to inject arbitrary web script or...

Samsung Security Manager ActiveMQ Broker Service DELETE Method Denial of Service Vulnerability

This vulnerability allows remote attackers to delete files of their choosing from systems running vulnerable installations of Samsung Security Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ActiveMQ Broker service that is installed as pa...

Apache ActiveMQ LDAP Authentication Bypass Vulnerability

Apache ActiveMQ is an open source message bus that supports JMS1.1 and J2EE 1.4 specification of the JMS Provider implementation . Apache ActiveMQ is configured to support LDAP servers with unauthenticated authentication mechanisms. A vulnerability in the LDAPLoginModule implementation provided b...

Apache ActiveMQ Apollo XML External Entity Injection Vulnerability

Apache ActiveMQ Apollo is a proxy server. An XML external entity injection vulnerability exists in Apache ActiveMQ Apollo, which allows remote attackers to exploit the vulnerability to submit a special XML request to obtain sensitive information...

Multiple Cross-Site Scripting Vulnerabilities in Apache ActiveMQ

Apache ActiveMQ is an open source message bus that supports JMS1.1 and J2EE 1.4 specification of the JMS Provider implementation . Apache ActiveMQ WEB-based management console multiple instances of cross-site scripting vulnerabilities , remote attackers can exploit the vulnerability to build...