org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.1.0), org.apache.qpid:qpid-broker (>=10.0.0, <=10.1.0) potentially affected by CVE-2026-92609 via org.apache.qpid:qpid-broker-plugins-management-http (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-management-http MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92609 Source advisory: SNYK:JAVA-ORGAPACHEQPID-20186799...

Session Fixation

Overview Affected versions of this package are vulnerable to Session Fixation through the reuse of a session identifier retained across successful authentication. An attacker can gain unauthorized access to an authenticated management session by exploiting the lack of HTTP session renewal after...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.1.0), org.apache.qpid:qpid-broker (>=10.0.0, <=10.1.0) potentially affected by CVE-2026-92609 via org.apache.qpid:qpid-broker-plugins-management-http (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-management-http MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92609 Source advisory: MEND:CVE-2026-92609...

EUVD-2022-3696

Malicious code in bioql PyPI...

CVE-2016-2157

Cross-site request forgery CSRF vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication of administrators for requests that manage...