Search CVE reports


Toggle filters

451 – 460 of 30167 results

Status is adjusted based on your filters.


CVE-2026-58302

Medium priority
Needs evaluation

rtapi_app in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escalation. It is installed SUID root and loads shared library modules via dlopen() by using a user-supplied module name. Insufficient validation of the module...

1 affected package

linuxcnc

Package 26.04 LTS
linuxcnc Needs evaluation
Show less packages

CVE-2026-57964

Medium priority
Needs evaluation

[Unknown description]

1 affected package

spice-vdagent

Package 26.04 LTS
spice-vdagent Needs evaluation
Show less packages

CVE-2026-54475

Medium priority
Needs evaluation

Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic temporary destinations are expected to be isolated to the connection that created them. The isolation can...

1 affected package

activemq

Package 26.04 LTS
activemq Needs evaluation
Show less packages

CVE-2026-53917

Medium priority
Needs evaluation

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker. An authenticated user can cause a broker DoS by sending a crafted OpenWire Message...

1 affected package

activemq

Package 26.04 LTS
activemq Needs evaluation
Show less packages

CVE-2026-53916

Medium priority
Needs evaluation

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. An unauthenticated client that opens a STOMP NIO connection can send header bytes that never terminate which...

1 affected package

activemq

Package 26.04 LTS
activemq Needs evaluation
Show less packages

CVE-2026-52760

Medium priority
Needs evaluation

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console. The browse page in the web console renders a message Id directly...

1 affected package

activemq

Package 26.04 LTS
activemq Needs evaluation
Show less packages

CVE-2026-50750

Medium priority
Needs evaluation

Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Following the fix for CVE-2026-49270 an unauthenticated attacker can now cause broker OOM by sending an repeated...

1 affected package

activemq

Package 26.04 LTS
activemq Needs evaluation
Show less packages

CVE-2026-50734

Medium priority
Needs evaluation

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All. An unauthenticated network attacker can cause a broker DoS by sending a crafted WireFormatInfo frame with a...

1 affected package

activemq

Package 26.04 LTS
activemq Needs evaluation
Show less packages

CVE-2026-49877

Medium priority
Needs evaluation

Improper Authorization vulnerability in Apache ActiveMQ. An authenticated low-privilege Web Console user by default can access /admin/* paths in the Web Console. The default Jetty settings incorrectly did not limit those paths to...

1 affected package

activemq

Package 26.04 LTS
activemq Needs evaluation
Show less packages

CVE-2026-49434

Medium priority
Needs evaluation

Improper Input Validation vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. An attacker that has access to publish or modify entries in LDAP that match the configured searchBase and searchFilter can...

1 affected package

activemq

Package 26.04 LTS
activemq Needs evaluation
Show less packages