824 matches found
CVE-2014-3600
XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...
DEBIAN-CVE-2014-3600
XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...
CVE-2014-3600
XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...
UBUNTU-CVE-2014-3600
XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...
CVE-2014-3579
XML external entity XXE vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...
CVE-2014-3600
CVE-2014-3600 is an XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x prior to 5.10.1. The issue allows remote consumers to trigger an XXE via an XPath-based selector when dequeuing XML messages, potentially exposing sensitive data. Public sources in the connected docs confirm Active...
CVE-2014-3579
CVE-2014-3579 is an XML External Entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1. Described across multiple sources as allowing a remote attacker to obtain sensitive information by crafting XML data processed by the broker (via an XPath-based selector during dequeue). The pu...
CVE-2014-3600
XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...
CVE-2014-3600
XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...
Apache ActiveMQ Web Console Default / No Credentials (HTTP)
The Apache ActiveMQ Web Console is unprotected or is using default credentials. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...
Apache ActiveMQ Fileserver remote code execution vulnerability(CVE-2016-3088)
Author: The know Chong Yu 404 laboratory 1. Background overview ActiveMQ is an Apache Software Foundation under an open source message-driven middleware software. Jetty is an open source servlet container, it is based on Java web container such as JSP and servlet to provide the running...
Apache ActiveMQ < 5.14.0 - Web Shell Upload Exploit
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. This module requires Metasploit: http://metasploit.com/download Current source:...
ActiveMQ < 5.14.0 - Web Shell Upload (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ActiveMQ web shell upload', 'Description' = %q The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to uplo...
Apache ActiveMQ 5.x Web Shell Upload
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ActiveMQ web shell upload', 'Description' = %q The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to uplo...
ActiveMQ web shell upload
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. This module requires Metasploit: https://metasploit.com/download Current source:...
Apache ActiveMQ Denial of Service Vulnerability (CNVD-2017-06719)
Apache ActiveMQ is the United States Apache Apache Software Foundation developed a set of open source messaging middleware , which supports Java messaging services , clustering , Spring Framework and so on. A denial of service vulnerability exists in Apache ActiveMQ version 5.14.1. An attacker ca...
Apache ActiveMQ 5.x < 5.14.5 ControlCommand DoS
The version of Apache ActiveMQ running on the remote host is 5.x prior to 5.14.5. It is, therefore, affected by an unspecified flaw in ControlCommand handling by the ActiveMQConnection::onControlCommand function within file ActiveMQConnection.java. An unauthenticated, remote attacker can exploit...
CVE-2015-7559
It was found that the Apache ActiveMQ client exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client...
Important: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R2 security and bug fix update
An update is now available for Red Hat JBoss Fuse and Red Hat JBoss A-MQ. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...