| CVE-2026-92550 |
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential…
|
Non notée
|
25 sept. 2026 |
| CVE-2026-92560 |
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential…
|
Non notée
|
25 sept. 2026 |
| CVE-2026-92573 |
Improper handling of compressed data in the shared GZIP decompressor used for AMQP 0-8/0-9/0-9-1 and AMQP 0-10 message…
|
Non notée
|
25 sept. 2026 |
| CVE-2026-92564 |
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of…
|
Non notée
|
25 sept. 2026 |
| CVE-2026-92608 |
Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion allows authenticated…
|
Non notée
|
25 sept. 2026 |
| CVE-2026-92609 |
Session fixation in HTTP management authentication allows remote attackers to gain unauthorized access to an…
|
Non notée
|
25 sept. 2026 |
| CVE-2026-68080 |
It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated…
|
Non notée
|
5 août 2026 |
| CVE-2026-68078 |
It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated…
|
Non notée
|
5 août 2026 |
| CVE-2026-68077 |
An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due…
|
Non notée
|
5 août 2026 |
| CVE-2026-68075 |
An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service
|
Non notée
|
5 août 2026 |
| CVE-2026-68073 |
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of…
|
Non notée
|
5 août 2026 |
| CVE-2026-68060 |
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential…
|
Non notée
|
5 août 2026 |
| CVE-2026-68074 |
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to…
|
Non notée
|
5 août 2026 |
| CVE-2019-0200 |
A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 which…
|
Non notée
|
6 mars 2019 |
| CVE-2018-8030 |
A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or…
|
Non notée
|
19 juin 2018 |
| CVE-2018-1298 |
A Denial of Service vulnerability was found in Apache Qpid Broker-J 7.0.0 in functionality for authentication of…
|
Non notée
|
9 févr. 2018 |
| CVE-2017-15702 |
In Apache Qpid Broker-J 0.18 through 0.32, if the broker is configured with different authentication providers on…
|
Non notée
|
1 déc. 2017 |
| CVE-2017-15701 |
In Apache Qpid Broker-J versions 6.1.0 through 6.1.4 (inclusive) the broker does not properly enforce a maximum frame…
|
Non notée
|
1 déc. 2017 |
| CVE-2016-8741 |
The Apache Qpid Broker for Java can be configured to use different so called AuthenticationProviders to handle user…
|
Non notée
|
15 mai 2017 |