https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:07:08.800569+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-20819 EUVD-2026-20819 2026-10-03T12:07:08.805054+00:00 EUVD-2026-20819 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3425 fkie_cve-2021-3425 2026-10-03T12:07:08.805101+00:00

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.

 https://cve.radiocsirt.org/vuln/ghsa-4h8h-q487-wmvf GHSA-4h8h-q487-wmvf 2026-10-03T12:07:08.805147+00:00

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.

 https://cve.radiocsirt.org/vuln/gsd-2021-3425 gsd-2021-3425 2026-10-03T12:07:08.805180+00:00 gsd-2021-3425 https://cve.radiocsirt.org/vuln/rhsa-2021:2689 RHSA-2021:2689 — Red Hat Security Advisory: Red Hat AMQ Broker 7.8.2 release and security update 2026-10-03T12:07:08.805194+00:00

jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS Broker: discloses JDBC username and password in the application log file netty: Information disclosure via the local system temporary directory netty: possible request smuggling in HTTP/2 due missing validation netty: Request smuggling via content-length header jetty: Symlink directory exposes webapp directory contents jetty: Ambiguous paths can access WEB-INF jetty: Resource exhaustion when receiving an invalid large TLS frame