Archive

24 August 2015

Vulnerabilities first published on this day (UTC), newest first.

← July 2015 2015 / August /24 September 2015 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium —

CVE-2015-6524

Improper Input Validation in Apache ActiveMQ

The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: thi…

activemq activemq org.apache.activemq:activemq-broker org.apache.activemq:activemq-jaas Debian Ubuntu Maven

Aug 24, 2015
Medium 6.4

CVE-2015-6563

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITO…

openssh openssh Debian Ubuntu

Aug 24, 2015