Most recent entries from all

bdu:2022-04782

cnvd-2016-03612

EUVD-2026-256388

fkie_cve-2016-3088

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

GHSA-rxqh-fc23-gxp2 — Improper Input Validation in Apache ActiveMQ

Affected: Maven: org.apache.activemq:activemq-client

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

gsd-2016-3088

RHSA-2015:1176 — Red Hat Security Advisory: Red Hat JBoss Fuse 6.2.0 update

async-http-client: SSL/TLS certificate verification is disabled under certain conditions async-http-client: missing hostname verification for SSL certificates smack: incorrect X.509 certificate validation smack: IQ response spoofing CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix smack: MitM vulnerability wss4j: Apache WSS4J is vulnerable to Bleichenbacher's attack (incomplete fix for CVE-2011-2487) wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property Java: PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation activemq: Fileserver web application vulnerability allowing RCE

UBUNTU-CVE-2016-3088

Affected: Ubuntu:Pro:16.04:LTS: activemq

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.