Lucene search
+L

41 matches found

RedhatCVE
RedhatCVE
•added 2026/10/20 12:48 p.m.•10 views

CVE-2026-93052

A flaw was found in the Linux kernel's bcm-vk driver. Improper memory ordering during the initialization of message queues can cause other kernel components to read outdated queue information. This occurs when the msgqinited flag is set before the message queue data is fully synchronized, leading...

5.5CVSS5.8AI score0.00205EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/23 4:29 p.m.•23 views

CVE-2026-95845

The Moquette Java MQTT broker is vulnerable to a denial of service (DoS) condition in versions prior to 0.18.1 . The root cause is the lack of a maximum length enforcement for pending per-session message queues. If a fast publisher sends messages to a slow subscriber with a full in-flight window,...

8.7CVSS5.9AI score0.00415EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/23 4:29 p.m.•16 views

CVE-2026-95845 Moquette unbounded per-session message queues allow memory exhaustion

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, the broker does not enforce a maximum length for pending per-session message queues. When a fast publisher sends messages to a slow subscriber whose in-flight window is full, queued messages can accumulate without bound in memory or...

8.7CVSS5.9AI score0.00415EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/09/23 4:29 p.m.•24 views

CVE-2026-95845 Moquette unbounded per-session message queues allow memory exhaustion

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, the broker does not enforce a maximum length for pending per-session message queues. When a fast publisher sends messages to a slow subscriber whose in-flight window is full, queued messages can accumulate without bound in memory or...

8.7CVSS5.9AI score0.00438EPSS
SaveExploits7References5
Cvelist
Cvelist
•added 2026/09/23 4:29 p.m.•51 views

CVE-2026-95845 Moquette unbounded per-session message queues allow memory exhaustion

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, the broker does not enforce a maximum length for pending per-session message queues. When a fast publisher sends messages to a slow subscriber whose in-flight window is full, queued messages can accumulate without bound in memory or...

8.7CVSS0.00415EPSS
SaveExploits1References3
Mend
Mend
•added 2026/09/23 4:29 p.m.•9 views

CVE-2026-95845

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, the broker does not enforce a maximum length for pending per-session message queues. When a fast publisher sends messages to a slow subscriber whose in-flight window is full, queued messages can accumulate without bound in memory or...

8.7CVSS5.9AI score0.00415EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•7 views

PT-2026-97396

Name of the Vulnerable Software and Affected Versions Moquette versions prior to 0.18.1 Description Moquette does not enforce a maximum length for pending per-session message queues. This allows queued messages to accumulate without bound in memory or persistent storage when a fast publisher send...

9.6CVSS5.8AI score0.00415EPSS
SaveExploits1References23
BDU FSTEC
BDU FSTEC
•added 2026/09/01 12:00 a.m.•13 views

Windows Message Queue Privilege Escalation

The vulnerability of Windows operating systems’ message queues is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS6.7AI score0.00333EPSS
SaveExploits0References2Affected Software20
Vulnrichment
Vulnrichment
•added 2026/06/18 9:19 p.m.•17 views

CVE-2026-8668 Hardcoded credentials in embedded content

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method...

5.1CVSS5.7AI score0.00271EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/18 9:19 p.m.•18 views

CVE-2026-8668

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method...

5.1CVSS5.2AI score0.00271EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/18 12:00 a.m.•11 views

CVE-2026-8668: Unprotected Transport of Credentials

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method...

5.1CVSS5.7AI score0.00271EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/12/24 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2022-50748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipc: mqueue: fix possible memory leak in initmqueuefs commit db7cfc380900 ipc: Free mqsysctls if ipc namespace creation failed Here's a similar memory leak to t...

5.5AI score0.00235EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2011-2898

Malware in sbrugna...

4.6CVSS5.7AI score0.00391EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
•added 2025/08/20 12:00 a.m.•19 views

Windows Message Queue Code Execution

The vulnerability of Windows operating systems’ message queues is related to access to resources through incompatible types. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

9CVSS7.4AI score0.08218EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/04/22 12:00 a.m.•20 views

Windows Message Queue Code Execution

The vulnerability of Windows operating systems’ message queues is related to access to resources through incompatible types. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.3CVSS8.8AI score0.00926EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2024/03/05 4:49 a.m.•12 views

SUSE CVE-2021-47069

In the Linux kernel, the following vulnerability has been resolved: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry domqtimedreceive calls wqsleep with a stack local address. The sender domqtimedsend uses this address to later call pipelinedsend. This leads to a very hard...

4.7CVSS7.5AI score0.00263EPSS
SaveExploits0References10
osv_debian
osv_debian
•added 2024/03/01 10:15 p.m.•20 views

DEBIAN-CVE-2021-47069

In the Linux kernel, the following vulnerability has been resolved: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry domqtimedreceive calls wqsleep with a stack local address. The sender domqtimedsend uses this address to later call pipelinedsend. This leads to a very hard...

7CVSS5.3AI score0.00263EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/01/15 12:00 a.m.•27 views

Windows Message Queue Unauthorized Access

The vulnerability of Message Queuing in Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

6.8CVSS6.9AI score0.02039EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/01/12 12:00 a.m.•27 views

Windows Message Queue DoS

The vulnerability of Windows operating systems’ message queues is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

7.8CVSS7.3AI score0.02759EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/01/12 12:00 a.m.•23 views

Windows Message Queue Unauthorized Access

The vulnerability of Message Queuing in Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

6.8CVSS6.9AI score0.01997EPSS
SaveExploits0References3
Rows per page
Query Builder