https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:17:09.425620+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-113398 EUVD-2026-113398 2026-10-03T13:17:09.523210+00:00 EUVD-2026-113398 https://cve.radiocsirt.org/vuln/fkie_cve-2012-6092 fkie_cve-2012-6092 2026-10-03T13:17:09.523260+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via (1) the refresh parameter to PortfolioPublishServlet.java (aka demo/portfolioPublish or Market Data Publisher), or vectors involving (2) debug logs or (3) subscribe messages in webapp/websocket/chat.js. NOTE: AMQ-4124 is covered by CVE-2012-6551.

 https://cve.radiocsirt.org/vuln/ghsa-rp9p-863f-9c4h GHSA-rp9p-863f-9c4h — Cross-site Scripting in Apache ActiveMQ 2026-10-03T13:17:09.523318+00:00

Affected: Maven: org.apache.activemq:activemq-core

Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via (1) the refresh parameter to PortfolioPublishServlet.java (aka demo/portfolioPublish or Market Data Publisher), or vectors involving (2) debug logs or (3) subscribe messages in webapp/websocket/chat.js. NOTE: AMQ-4124 is covered by CVE-2012-6551.

 https://cve.radiocsirt.org/vuln/gsd-2012-6092 gsd-2012-6092 2026-10-03T13:17:09.523346+00:00 gsd-2012-6092 https://cve.radiocsirt.org/vuln/rhsa-2013:1029 RHSA-2013:1029 — Red Hat Security Advisory: Fuse MQ Enterprise 7.1.0 update 2026-10-03T13:17:09.523360+00:00

activemq: Multiple XSS flaws in web demos activemq: DoS by resource consumption via HTTP requests to sample webapp ActiveMQ: XSS vulnerability in scheduled.jsp ActiveMQ: XSS vulnerability in portfolioPublish demo application HawtJNI: predictable temporary file name leading to local arbitrary code execution activemq: Unauthenticated access to web console