EUVD-2022-1134

Malicious code in bioql PyPI...

CVE-2025-36222

IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without client authentication that could allow an attacker to perform unauthorized actions...

PT-2025-37265

Name of the Vulnerable Software and Affected Versions: IBM Fusion versions 2.2.0 through 2.10.1 IBM Fusion HCI versions 2.2.0 through 2.10.0 IBM Fusion HCI for watsonx versions 2.8.2 through 2.10.0 Description: IBM Fusion, IBM Fusion HCI, and IBM Fusion HCI for watsonx utilize insecure default...

Linux Distros Unpatched Vulnerability : CVE-2021-26118

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed...

Linux Distros Unpatched Vulnerability : CVE-2022-35278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML i...

Linux Distros Unpatched Vulnerability : CVE-2016-3088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an...

Linux Distros Unpatched Vulnerability : CVE-2016-6810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console...

GHSA-MMXM-8W33-WC4H vulnerabilities

Vulnerabilities for packages: trino, jenkins, solr, apache-nifi-registry, apache-activemq-artemis, apache-nifi...

CVE-2025-5115 vulnerabilities

Vulnerabilities for packages: trino, jenkins, solr, apache-nifi-registry, apache-activemq-artemis, apache-nifi...

CVE-2025-5115 vulnerabilities

Vulnerabilities for packages: trino, jenkins, solr, neo4j, hadoop-fips, apache-nifi, apache-activemq-artemis, apache-nifi-registry...

GHSA-MMXM-8W33-WC4H vulnerabilities

Vulnerabilities for packages: trino, jenkins, solr, neo4j, hadoop-fips, apache-nifi, apache-activemq-artemis, apache-nifi-registry...

Linux Distros Unpatched Vulnerability : CVE-2025-27533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unmarshalling of OpenWire commands the size value of buffers was not proper...

CVE-2016-15046

A client-side remote code execution vulnerability exists in Hanwha Techwin Smart Security Manager SSM versions 1.32 and 1.4, due to improper restrictions on the PUT method exposed by the bundled Apache ActiveMQ instance running on port 8161. An attacker can exploit this flaw through a Cross-Origi...

CVE-2016-15046 Hanwha Techwin SSM 1.32 & 1.4 ActiveMQ File Upload RCE

A client-side remote code execution vulnerability exists in Hanwha Techwin Smart Security Manager SSM versions 1.32 and 1.4, due to improper restrictions on the PUT method exposed by the bundled Apache ActiveMQ instance running on port 8161. An attacker can exploit this flaw through a Cross-Origi...

PT-2025-31212 · Apache +1 · Apache Activemq +1

Name of the Vulnerable Software and Affected Versions: Hanwha Techwin Smart Security Manager SSM versions 1.32 and 1.4 Description: A client-side remote code execution issue exists due to improper restrictions on the PUT method exposed by the bundled Apache ActiveMQ instance running on port 8161...

ROS-20250710-08

A vulnerability in the OpenWire command handler of the Apache ActiveMQ software platform is related to a lack of control over user input. control over user input. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service by sending specially crafted...

Security Bulletin: IBM Jazz for Service Management is vulnerable due to Apache ActiveMQ Memory Allocation with Excessive Size Value vulnerability

Summary IBM Jazz for Service Management is vulnerable due to Apache ActiveMQ Memory Allocation with Excessive Size Value vulnerability CVE-2025-27533 Vulnerability Details CVEID:CVE-2025-27533 DESCRIPTION: Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During...

Security Bulletin: IBM Jazz for Service Management is vulnerable due to issues in JDOM, Apache Log4j 1.x, Apache ActiveMQ and Apache Camel

Summary IBM Jazz for Service Management is vulnerable due to issues in JDOM, Apache Log4j 1.x, Apache ActiveMQ and Apache Camel CVE-2021-33813, CVE-2022-23302, CVE-2022-23307, CVE-2023-26464, CVE-2019-0222, CVE-2022-41678, CVE-2018-11775, CVE-2020-11971, CVE-2019-0188, CVE-2017-5643. Vulnerabilit...

The vulnerability of the command processor in the OpenWire software platform from Apache ActiveMQ, which allows a attacker to cause a service failure.

The vulnerability of the OpenWire command processor in the Apache ActiveMQ software platform lies in the lack of control over the data entered by users. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted packets...

CVE-2020-13947

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0...