10295 matches found
PT-2026-89275
Name of the Vulnerable Software and Affected Versions Apache Artemis versions 2.50.0 through 2.56.0 Apache ActiveMQ Artemis versions 1.0.0 through 2.44.0 Description An unauthenticated remote attacker can create arbitrary durable queues using the CORE protocol. This allows for unauthorized...
CVE-2026-67593: Missing Authentication for Critical Function
A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ...
PT-2026-89273
A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ...
PT-2026-89624
Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description Improper authorization allows a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges. RabbitMQ is a message broker that...
kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()
A flaw was found in the Linux kernel's RDMA/mana component. A local user could trigger a kernel corruption by providing specific configurations through the user Application Programming Interface uAPI that cause an internal error. This issue arises when Work Queues WQs are specified to share the...
EUVD-2026-74296
A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...
AZL-100926 CVE-2026-86564 affecting package dpdk 23.11.3-1
A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...
CVE-2026-86564
A flaw in DPDK lib/vhost results from missing length validation before reading command_data in the virtio-net control-queue handler , which can cause an out-of-bounds read and a host process crash . The CVSS v3.1 score is 3.3 (LOW) , with a local attack vector, low privileges required, no user in...
CVE-2026-86564
A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...
CVE-2026-86564
A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash. Mitigation No mitigation is currently available...
CVE-2026-72932
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...
CVE-2026-68887
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network...
EUVD-2026-73666
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...
CVE-2026-72932
CVE-2026-72932 is a buffer over-read in the Windows Message Queuing Queue Manager that allows an unauthorized, unauthenticated attacker to disclose information over a network . The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, low complexity, and high confidentiality impact but no ...
CVE-2026-68887
CVE-2026-68887 is an out-of-bounds read in Windows Message Queuing Queue Manager that allows an unauthorized, network-based attacker to trigger a denial of service . The vulnerability requires no prior authentication or user interaction and carries a CVSS 3.1 base score of 7.5 (HIGH) , with impac...
EUVD-2026-73122
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network...
Exploit for CVE-2026-73317
CVE-2026-73317 XenForo before 2.3.13 lets an administrator wi...
Incorrect Calculation
Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Calculation via the checkout request process. An attacker can manipulate the assets.requestscounter by repeatedly submitting duplicate checkout requests or calling...
CVE-2026-73317
XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows limited administrators with only the rebuildCache permission to perform unauthorized approval queue actions by supplying an arbitrary job class and actor user ID in the POST body...
