https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T17:28:33.063977+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-12109 bdu:2015-12109 2026-10-27T17:28:33.069667+00:00 bdu:2015-12109 https://cve.radiocsirt.org/vuln/cnvd-2015-05756 cnvd-2015-05756 2026-10-27T17:28:33.069704+00:00 cnvd-2015-05756 https://cve.radiocsirt.org/vuln/euvd-2026-94318 EUVD-2026-94318 2026-10-27T17:28:33.069720+00:00 EUVD-2026-94318 https://cve.radiocsirt.org/vuln/fkie_cve-2015-6524 fkie_cve-2015-6524 2026-10-27T17:28:33.069733+00:00

The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-3612 per ADT2 due to different vulnerability types.

 https://cve.radiocsirt.org/vuln/ghsa-23cr-5hr4-rgwv GHSA-23cr-5hr4-rgwv — Improper Input Validation in Apache ActiveMQ 2026-10-27T17:28:33.069762+00:00

Affected: Maven: org.apache.activemq:activemq-broker, Maven: org.apache.activemq:activemq-jaas

The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-3612 per ADT2 due to different vulnerability types.

 https://cve.radiocsirt.org/vuln/gsd-2015-6524 gsd-2015-6524 2026-10-27T17:28:33.069789+00:00 gsd-2015-6524 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-6524 UBUNTU-CVE-2015-6524 2026-10-27T17:28:33.069801+00:00

Affected: Ubuntu:14.04:LTS: activemq

The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-3612 per ADT2 due to different vulnerability types.