https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:09:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-211663 EUVD-2026-211663 https://cve.radiocsirt.org/vuln/euvd-2026-211663 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32081 <p>Vert.x STOMP is a vert.x implementation of the STOMP specification that provides a STOMP server and client. From versions 3.1.0 until 3.9.16 and 4.0.0 until 4.4.2, a Vert.x STOMP server processes client STOMP frames without checking that the client send an initial CONNECT frame replied with a successful CONNECTED frame. The client can subscribe to a destination or publish message without prior authentication. Any Vert.x STOMP server configured with an authentication handler is impacted. The issue is patched in Vert.x 3.9.16 and 4.4.2. There are no trivial workarounds.</p> <p>Vert.x STOMP is a vert.x implementation of the STOMP specification that provides a STOMP server and client. From versions 3.1.0 until 3.9.16 and 4.0.0 until 4.4.2, a Vert.x STOMP server processes client STOMP frames without checking that the client send an initial CONNECT frame replied with a successful CONNECTED frame. The client can subscribe to a destination or publish message without prior authentication. Any Vert.x STOMP server configured with an authentication handler is impacted. The issue is patched in Vert.x 3.9.16 and 4.4.2. There are no trivial workarounds.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-32081 https://cve.radiocsirt.org/vuln/ghsa-gvrq-cg5r-7chp <p><strong>Affected:</strong> Maven: io.vertx:vertx-stomp</p> <p>### Impact A Vert.x STOMP server processes client STOMP frames without checking that the client send an initial CONNECT frame replied with a successful CONNECTED frame. The client can subscribe to a destination or publish message without prior authentication. Any Vert.x STOMP server configured with an authentication handler is impacted.</p> <p>### Patches The issue is patched in Vert.x 4.4.2 and Vert.x 3.9.16</p> <p>### Workarounds No trivial workaround.</p> <p><strong>Affected:</strong> Maven: io.vertx:vertx-stomp</p> <p>### Impact A Vert.x STOMP server processes client STOMP frames without checking that the client send an initial CONNECT frame replied with a successful CONNECTED frame. The client can subscribe to a destination or publish message without prior authentication. Any Vert.x STOMP server configured with an authentication handler is impacted.</p> <p>### Patches The issue is patched in Vert.x 4.4.2 and Vert.x 3.9.16</p> <p>### Workarounds No trivial workaround.</p> https://cve.radiocsirt.org/vuln/ghsa-gvrq-cg5r-7chp https://cve.radiocsirt.org/vuln/gsd-2023-32081 gsd-2023-32081 https://cve.radiocsirt.org/vuln/gsd-2023-32081 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1769 <p>Ein Angreifer kann mehrere Schwachstellen in Hitachi Ops Center ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Hitachi Ops Center ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1769