https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:05:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-113398 EUVD-2026-113398 https://cve.radiocsirt.org/vuln/euvd-2026-113398 https://cve.radiocsirt.org/vuln/fkie_cve-2012-6092 <p>Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via (1) the refresh parameter to PortfolioPublishServlet.java (aka demo/portfolioPublish or Market Data Publisher), or vectors involving (2) debug logs or (3) subscribe messages in webapp/websocket/chat.js. NOTE: AMQ-4124 is covered by CVE-2012-6551.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via (1) the refresh parameter to PortfolioPublishServlet.java (aka demo/portfolioPublish or Market Data Publisher), or vectors involving (2) debug logs or (3) subscribe messages in webapp/websocket/chat.js. NOTE: AMQ-4124 is covered by CVE-2012-6551.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-6092 https://cve.radiocsirt.org/vuln/ghsa-rp9p-863f-9c4h <p><strong>Affected:</strong> Maven: org.apache.activemq:activemq-core</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via (1) the refresh parameter to PortfolioPublishServlet.java (aka demo/portfolioPublish or Market Data Publisher), or vectors involving (2) debug logs or (3) subscribe messages in webapp/websocket/chat.js. NOTE: AMQ-4124 is covered by CVE-2012-6551.</p> <p><strong>Affected:</strong> Maven: org.apache.activemq:activemq-core</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via (1) the refresh parameter to PortfolioPublishServlet.java (aka demo/portfolioPublish or Market Data Publisher), or vectors involving (2) debug logs or (3) subscribe messages in webapp/websocket/chat.js. NOTE: AMQ-4124 is covered by CVE-2012-6551.</p> https://cve.radiocsirt.org/vuln/ghsa-rp9p-863f-9c4h https://cve.radiocsirt.org/vuln/gsd-2012-6092 gsd-2012-6092 https://cve.radiocsirt.org/vuln/gsd-2012-6092 https://cve.radiocsirt.org/vuln/rhsa-2013:1029 <p>activemq: Multiple XSS flaws in web demos activemq: DoS by resource consumption via HTTP requests to sample webapp ActiveMQ: XSS vulnerability in scheduled.jsp ActiveMQ: XSS vulnerability in portfolioPublish demo application HawtJNI: predictable temporary file name leading to local arbitrary code execution activemq: Unauthenticated access to web console</p> <p>activemq: Multiple XSS flaws in web demos activemq: DoS by resource consumption via HTTP requests to sample webapp ActiveMQ: XSS vulnerability in scheduled.jsp ActiveMQ: XSS vulnerability in portfolioPublish demo application HawtJNI: predictable temporary file name leading to local arbitrary code execution activemq: Unauthenticated access to web console</p> https://cve.radiocsirt.org/vuln/rhsa-2013:1029