Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 23

Export CSV
CVE-2013-2035

HawtJNI: predictable temporary file name leading to local arbitrary code execution

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Fuse Mq Enterprise Hawtjni Jboss Amq and 9 more
CVE-2013-2172

Java: XML signature spoofing

jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to the SignedInfo part of the Signature."

CVSS 2.0 · 4.3 Medium EPSS 5.9% KEV · Not listed
Vendors
Apache Redhat
Products
Santuario Xml Security For Java Fuse Esb Enterprise Fuse Management Console and 8 more
CVE-2013-3060

activemq: Unauthenticated access to web console

The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests.

CVSS 2.0 · 6.4 Medium EPSS 6.3% KEV · Not listed
Vendors
Apache Redhat
Products
Activemq Fuse Message Broker Fuse Mq Enterprise