Threat database

A Cross-site Scripting (XSS) vulnerability exists in Wikimedia Foundation MediaWiki due to improper neutralization of input during web page generation. This affects multiple versions of MediaWiki prior to 1.46.0, including specific versions such as 1.45.4, 1.44.6, and 1.43.9. The vulnerability is associated with the program file resources/src/mediawiki.Api/index.Js. The CVSS v3.1 score is 6.1, indicating a medium severity issue.

A vulnerability in Wikimedia Foundation MediaWiki allows exposure of sensitive information to unauthorized actors. It affects multiple versions prior to 1.46.0, including 1.45.4, 1.44.6, and 1.43.9. The issue is related to the program file includes/Actions/InfoAction.Php. The vulnerability has a medium severity with a CVSS score of 6.5.

A vulnerability in Wikimedia Foundation MediaWiki allows exposure of sensitive information to unauthorized actors. The issue involves several program files related to API queries and permission management. It has a CVSS score of 7.5, indicating a medium severity level. The vulnerability affects multiple specific versions of MediaWiki, including various Ubuntu package versions. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.

A Cross-site Scripting (XSS) vulnerability exists in Wikimedia Foundation MediaWiki affecting multiple program files related to language and logging components. This vulnerability allows improper neutralization of input during web page generation. It affects MediaWiki versions prior to 1.46.0, including specific older versions such as 1.45.4, 1.44.6, and 1.43.9. The vulnerability has a medium severity with a CVSS score of 6.1.

A Cross-site Scripting (XSS) vulnerability exists in Wikimedia Foundation MediaWiki affecting versions from 1.46.0-rc.0 before 1.46.0. The issue is due to improper neutralization of input during web page generation in the ApiSandboxLayout.js file. This vulnerability has a medium severity with a CVSS score of 5.4.

A Cross-site Scripting (XSS) vulnerability exists in Wikimedia Foundation MediaWiki, specifically in the program files related to resources/src/mediawiki.Special.Block/SpecialBlock.Vue. This vulnerability involves improper neutralization of input during web page generation, which can lead to partial compromise of confidentiality and integrity. The issue affects multiple specific versions of MediaWiki. The CVSS score is 4.8, indicating a medium severity level.

Oj (Optimized JSON) is a Ruby gem for JSON parsing and object marshalling. Versions prior to 3.17.2 contain a heap use-after-free vulnerability triggered when disabling symbol_keys on a reused Oj::Parser instance. This occurs because the internal key cache is freed but the pointer is not cleared, leading to use of freed memory on subsequent parses. The issue is fixed in version 3.17.2.

Oj (Optimized JSON) is a Ruby gem for JSON parsing and object marshalling. Versions prior to 3.17.2 have a Use-After-Free vulnerability in Oj::Parser's usual mode due to improper garbage collection marking of array_class and hash_class references. This can cause a segmentation fault if the garbage collector reclaims a class object before parsing. The issue is fixed in version 3.17.2.

Oj (Optimized JSON) is a Ruby gem for JSON parsing and object marshalling. Versions prior to 3.17.2 are vulnerable to a Use-After-Free issue in SAJ mode. The vulnerability occurs because Oj::Parser does not protect cached object keys of 35 bytes or more from garbage collection. A Ruby callback triggering garbage collection inside hash_end can cause the key string to be freed while the C parser still holds a pointer to it, leading to a segmentation fault. This issue has been fixed in version 3.17.2.

Oj (Optimized JSON) is a Ruby gem used for JSON parsing and object marshalling. Versions prior to 3.17.2 contain a vulnerability in the Oj.load function that leads to heap corruption when parsing JSON strings longer than 2 GB. This is caused by an integer overflow in the buf_append_string function, resulting in out-of-bounds memory copying and process crashes. The issue has been fixed in version 3.17.2.

c3p0 versions prior to 0.14.0 contain a deserialization vulnerability when used with certain other libraries. This vulnerability arises because c3p0's DataSource implementations can be exploited as a "sink" for deserialization gadgets via JavaBean property auto-resolution during deserialization. Attackers can craft malicious serialized DataSource objects that trigger unsafe property lookups, potentially invoking vulnerable JDBC drivers. The issue requires a susceptible DataSource/ConnectionPoolDataSource, a vulnerable JDBC driver on the classpath, and a deserialization context that auto-resolves bean properties, such as collections sorted by Apache commons-beanutils Comparator. This vulnerability has been fixed in version 0.14.0.

A vulnerability in the DCMTK client using bit-preserving C-GET storage mode allows a malicious or compromised server to cause the client to write files outside the intended output directory by using relative (../) and absolute paths. This can lead to unauthorized file writes on the client system.

CVE-2026-49432 is an improper input validation vulnerability in Apache ActiveMQ and its STOMP connectors. A remote unauthenticated attacker can send a negative content-length value to trigger denial-of-service conditions. This can cause out-of-memory (OOM) errors or abnormal connection closures depending on the STOMP transport type. The issue affects versions before 5.19.8 and from 6.0.0 before 6.2.7. Upgrading to versions 5.19.8 or 6.2.7 resolves the vulnerability.

An improper input validation vulnerability exists in Apache ActiveMQ Broker and Apache ActiveMQ versions before 5.19.8 and from 6.0.0 before 6.2.7. An attacker with the ability to publish or modify LDAP entries matching the configured searchBase and searchFilter can instantiate denied transports inside the broker JVM, potentially spawning a second BrokerService within the same JVM. This vulnerability is fixed in versions 5.19.8 and 6.2.7.

An improper authorization vulnerability exists in Apache ActiveMQ Web Console where authenticated low-privilege users can access administrative paths by default due to incorrect Jetty settings. This affects versions before 5.19.8 and from 6.0.0 before 6.2.7. Upgrading to versions 5.19.8 or 6.2.7 and later mitigates the issue.

CVE-2026-50734 is a vulnerability in Apache ActiveMQ and its client where an unauthenticated network attacker can cause a denial of service by sending a crafted WireFormatInfo frame with an excessively large size value. This triggers an out-of-memory condition during pre-authentication negotiation, crashing the broker. The issue affects versions before 5.19.8 and from 6.0.0 before 6.2.7. Upgrading to versions 5.19.8 or 6.2.7 or later mitigates the vulnerability.

A denial of service vulnerability exists in Apache ActiveMQ Broker versions from 5.19.7 before 5.19.8 and from 6.2.6 before 6.2.7. An unauthenticated attacker can cause an out-of-memory condition by sending repeated BrokerInfo commands without a ConnectionInfo, leading to broker crash. The issue is fixed in version 6.2.7.

CVE-2026-52760 is a cross-site scripting (XSS) vulnerability in Apache ActiveMQ and its Web Console. The vulnerability arises because the browse page in the web console renders JMS message IDs without proper sanitization. An authenticated producer can craft a message ID containing malicious HTML or JavaScript, which executes in the browser of an administrator viewing the queue. This affects Apache ActiveMQ versions before 5.19.8 and from 6.0.0 before 6.2.7. Upgrading to versions 5.19.8 or 6.2.7 or later mitigates the issue.

A vulnerability in Apache ActiveMQ allows an unauthenticated client opening a STOMP NIO connection to send header bytes that never terminate, causing the broker to buffer them without limit and exhaust the JVM heap. This can lead to denial of service due to resource exhaustion. The issue affects Apache ActiveMQ versions before 5.19.8 and from 6.0.0 before 6.2.7. Upgrading to versions 5.19.8 or 6.2.7 resolves the vulnerability.

A vulnerability in Apache ActiveMQ allows an authenticated user to cause a denial of service (DoS) by sending a crafted OpenWire message with an excessively large encoded size value for the map. This triggers out-of-memory (OOM) conditions and crashes the broker. The issue affects multiple Apache ActiveMQ components before versions 5.19.8 and 6.2.7. Upgrading to these fixed versions mitigates the vulnerability.