EUVD-2022-5769

Malicious code in bioql PyPI...

EUVD-2022-3797

Malicious code in bioql PyPI...

Jolokia Arbitrary File Read

Jolokia is a JMX-HTTP bridge giving an alternative to JSR-160 connectors. Jolokia includes a compilerDirectivesAdd action, which allows an unauthenticated attacker to read arbitrary files on the server. No source data...

Cross-site Request Forgery (CSRF)

jolokia is vulnerable to cross-site request forgery CSRF. The backend manager does not properly handle the strict checking for origin and referrer header, causing a system-wide CSRF which subsequently allows a remote code execution...

Apache ActiveMQ Web Console Cross-Site Scripting Vulnerability

Apache ActiveMQ is a popular messaging and integration model provider . Apache ActiveMQ 5.0.0 - 5.13.1 Multiple cross-site scripting vulnerabilities exist in the Web Management Console and in Java memory dumps due to incorrect user data output validation and improper privilege settings within...