1773 matches found
Apache多款产品 输入验证错误漏洞
Apache ActiveMQ, among others, is a product of the Apache Foundation in the United States. Apache ActiveMQ is an open-source messaging middleware. Apache ActiveMQ Broker is a enterprise-level messaging proxy middleware that supports multiple protocols. Apache ActiveMQ All is a complete messaging...
Linux Distros Unpatched Vulnerability : CVE-2026-40466
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ...
Linux Distros Unpatched Vulnerability : CVE-2026-41043
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache ActiveMQ, Apache ActiveMQ Web. An authenticated attacker can...
PT-2026-34867
Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions prior to 5.19.6 Apache ActiveMQ versions 6.0.0 through 6.2.4 Apache ActiveMQ Broker versions prior to 5.19.6 Apache ActiveMQ Broker versions 6.0.0 through 6.2.4 Apache ActiveMQ All versions prior to 5.19.6 Apache...
April Linux Patch Wednesday
April Linux Patch Wednesday. In April, Linux vendors addressed 1,035 vulnerabilities - nearly twice as many as in March. One might assume that most of these would again be Linux Kernel vulnerabilities, but that's not the case! Linux Kernel vulnerabilities were relatively few - just 209. The...
CVE-2026-33227 vulnerabilities
Vulnerabilities for packages: zipkin, apache-activemq-artemis...
GHSA-5568-6QCG-G7FX vulnerabilities
Vulnerabilities for packages: zipkin, apache-activemq-artemis...
CVE-2026-39304 vulnerabilities
Vulnerabilities for packages: zipkin, apache-activemq-artemis...
GHSA-H2H4-5M64-M273 vulnerabilities
Vulnerabilities for packages: zipkin, apache-activemq-artemis...
VulnCheck KEV: CVE-2024-32114
In Apache ActiveMQ 6.x, the default configuration doesn't secure the API web context where the Jolokia JMX REST API and the Message REST API are located. It means that anyone can use these layers without any required authentication. Potentially, anyone can interact with the broker using Jolokia J...
CVE-2026-34197 vulnerabilities
Vulnerabilities for packages: apache-activemq, geoserver, apache-activemq-fips...
GHSA-RXPJ-7QVF-XV32 vulnerabilities
Vulnerabilities for packages: apache-activemq, geoserver, apache-activemq-fips...
ROOT-OS-DEBIAN-11-CVE-2026-34197 CVE-2026-34197 in rootio-activemq - Patched by Root
Root has patched CVE-2026-34197 in the rootio-activemq package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-34197 CVE-2026-34197 in rootio-activemq - Patched by Root
Root has patched CVE-2026-34197 in the rootio-activemq package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-34197 CVE-2026-34197 in rootio-activemq - Patched by Root
Root has patched CVE-2026-34197 in the rootio-activemq package for Root:Debian:12. Multiple fixed versions available...
Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation
A recently disclosed high-severity security flaw in Apache ActiveMQ Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and Infrastructure Security Agency CISA. To that end, the agency has added the vulnerability, tracked as CVE-2026-34197 CVSS score: 8.8, to its...
BIT-ACTIVEMQ-2026-39304 Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be exploited to cause DoS via OOM
Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ. ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 handshake KeyUpdates triggered by clients. This makes it possible for a client to rapidly trigger updates which causes...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-34197link is external Apache ActiveMQ Improper Input Validation Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber acto...
