Skip to content
OpenAdvisories

Archive

21 April 2013

Vulnerabilities first published on this day (UTC), newest first.

← March 2013 2013 / April /21 May 2013 →
  1. 14
  2. 26
  3. 319
  4. 414
  5. 58
  6. 6 
  7. 72
  8. 87
  9. 931
  10. 1015
  11. 1116
  12. 1210
  13. 132
  14. 14 
  15. 15 
  16. 1614
  17. 17152
  18. 1814
  19. 197
  20. 20 
  21. 213
  22. 2222
  23. 235
  24. 2416
  25. 2528
  26. 2610
  27. 274
  28. 283
  29. 2915
  30. 303
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2013-3060

    Improper Authentication in Apache ActiveMQ

    The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests.

    org.apache.activemq:activemq-client Maven
  • Medium —
    CVE-2012-6092

    Cross-site Scripting in Apache ActiveMQ

    Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via (1) the refresh parameter to PortfolioPublishServlet.java (aka demo/portfolioPublish or Mark…

    org.apache.activemq:activemq-core Maven
  • Medium —
    CVE-2012-6551

    Apache ActiveMQ default configuration subject to denial of service

    The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial of service (broker resource consumption) via HTTP requests.

    org.apache.activemq:apache-activemq org.apache.activemq:activemq-web-demo Maven