org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (1.3.0) +2 more potentially affected by CVE-2026-41044 via org.apache.activemq:apache-activemq (5.0.0)

org.apache.activemq:apache-activemq MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:apache-activemq and may be impacted: - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 -...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (1.3.0) +2 more potentially affected by CVE-2026-41044 via org.apache.activemq:apache-activemq (5.0.0)

org.apache.activemq:apache-activemq MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:apache-activemq and may be impacted: - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 -...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (>=1.2.0, <=1.3.0) +3 more potentially affected by CVE-2026-40466 via org.apache.activemq:apache-activemq (>=4.1.1, <=5.0.0)

org.apache.activemq:apache-activemq MAVEN version =4.1.1, =1.2.0, =1.1.0, =1.3.0 - org.apache.camel:camel-example-spring 1.2.0 - org.apache.camel:camel-example-spring-xquery 1.3.0 Source cves: CVE-2026-40466 Source advisory: MEND:CVE-2026-40466...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (1.3.0) +2 more potentially affected by CVE-2026-39304 via org.apache.activemq:apache-activemq (5.0.0)

org.apache.activemq:apache-activemq MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:apache-activemq and may be impacted: - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 -...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (1.3.0) +2 more potentially affected by CVE-2026-39304 via org.apache.activemq:apache-activemq (5.0.0)

org.apache.activemq:apache-activemq MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:apache-activemq and may be impacted: - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 -...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (>=1.2.0, <=1.3.0) +3 more potentially affected by CVE-2026-39304 via org.apache.activemq:apache-activemq (>=4.1.1, <=5.0.0)

org.apache.activemq:apache-activemq MAVEN version =4.1.1, =1.2.0, =1.1.0, =1.3.0 - org.apache.camel:camel-example-spring 1.2.0 - org.apache.camel:camel-example-spring-xquery 1.3.0 Source cves: CVE-2026-39304 Source advisory: MEND:CVE-2026-39304...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (1.3.0) +2 more potentially affected by CVE-2025-66168 via org.apache.activemq:apache-activemq (5.0.0)

org.apache.activemq:apache-activemq MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:apache-activemq and may be impacted: - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 -...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (>=1.2.0, <=1.3.0) +3 more potentially affected by CVE-2025-66168 +1 more via org.apache.activemq:apache-activemq (>=4.1.1, <=5.0.0)

org.apache.activemq:apache-activemq MAVEN version =4.1.1, =1.2.0, =1.1.0, =1.3.0 - org.apache.camel:camel-example-spring 1.2.0 - org.apache.camel:camel-example-spring-xquery 1.3.0 Source cves: CVE-2025-66168, CVE-2026-40046 Source advisory: MEND:CVE-2025-66168...

[SECURITY] Fedora 42 Update: qt5-qtxmlpatterns-5.15.18-1.fc42

The Qt XML Patterns module provides support for XPath, XQuery, XSLT, and XML Schema validation...

EUVD-2008-3840

Malware in sbrugna...

BIT-NIFI-2022-29265 Improper Restriction of XML External Entity References in Multiple Components

Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML files. The following Processors attempt to resolve XML...

O2OA security vulnerabilities

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which originates from a cross-site scripting due to incorrect manipulation of the parameters description/applicationName/queryName in the file...

Websoft HCM Automation Software Unauthenticated Access

The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of entered data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a specially crafted XQuery quer...

[SECURITY] Fedora 40 Update: qt5-qtxmlpatterns-5.15.14-1.fc40

The Qt XML Patterns module provides support for XPath, XQuery, XSLT, and XML Schema validation...

PT-2024-41448 · Ооо "Вебсофт Девелопмент" · Websoft Hcm

Уязвимость программного обеспечения автоматизации HR-процессов Websoft HCM связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации путём отправки специально...

[SECURITY] Fedora 40 Update: kawa-3.1.1-19.fc40

Kawa is an implementation of the Scheme programming language. It is implemented in Java, and compiles Scheme into Java byte-codes. It also includes an XQuery implementation, accessible via the qexo script...

cr-api-client (>=1.9.1, <=5.1.7), drb-impl-image (>=1.0.0a3, <=1.0.0b2) +33 more potentially affected by CVE-2022-40897 via setuptools (44.0.0)

setuptools PYPI version 44.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cr-api-client =1.9.1, =1.0.0a3, =1.0.0b1, =1.0.2, =1.0.1, =4.9.0, =1.3.15.8, =0.6.2, =1.26.0, =1.26.0, =1.26.0, =1.28.0 and more Source cve...

Websoft HCM Automation Software XQuery Logic Alteration

The vulnerability of Websoft HCM’s automation software for HR processes is related to deficiencies in the process of eliminating special elements from output data. Exploiting this vulnerability allows a malicious actor to remotely carry out an attack aimed at altering the query logic in the XQuer...

org.apache.activemq:apache-activemq (>=5.0.0, <=5.7.0), org.apache.axis2:axis2-integration (1.4) +3 more potentially affected by CVE-2012-6551 via org.apache.activemq:activemq-web-demo (>=5.0.0, <=5.7.0)

org.apache.activemq:activemq-web-demo MAVEN version =5.0.0, =5.0.0, =5.7.0 - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 - org.apache.camel:camel-example-jms-file 1.3.0 - org.apache.camel:camel-example-spring-xquery 1.3.0 Source cves: CVE-2012-6551 Source...

PT-2022-5583

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to insufficient neutralization of special elements in output, which can be exploited by a remote attacker to modify the logic of XQuery requests to the database by...