Skip to content
OpenAdvisories

Archive

27 August 2012

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium —

    Apache QPID Allows Remote Authentication Bypass

    Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.

  • Medium —

    Typo3 Exception Handler XSS

    Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.