Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.activemq/activemq-all@5.0.0
Typemaven
Namespaceorg.apache.activemq
Nameactivemq-all
Version5.0.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version5.15.3
Latest_non_vulnerable_version6.2.1
Affected_by_vulnerabilities
0
url VCID-12vs-qnkd-jkft
vulnerability_id VCID-12vs-qnkd-jkft
summary 
Cross-site Scripting
An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the `queue.jsp` page of Apache ActiveMQ.
references
0
reference_url https://lists.apache.org/thread.html/03f91b1fb85686a848cee6b90112cf6059bd1b21b23bacaa11a962e1@%3Cdev.activemq.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/03f91b1fb85686a848cee6b90112cf6059bd1b21b23bacaa11a962e1@%3Cdev.activemq.apache.org%3E
1
reference_url https://lists.apache.org/thread.html/2b5c0039197a4949f29e1e2c9441ab38d242946b966f61c110808bcc@%3Ccommits.activemq.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/2b5c0039197a4949f29e1e2c9441ab38d242946b966f61c110808bcc@%3Ccommits.activemq.apache.org%3E
2
reference_url https://lists.apache.org/thread.html/3f1e41bc9153936e065ca3094bd89ff8167ad2d39ac0b410f24382d2@%3Cgitbox.activemq.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/3f1e41bc9153936e065ca3094bd89ff8167ad2d39ac0b410f24382d2@%3Cgitbox.activemq.apache.org%3E
3
reference_url https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E
4
reference_url https://lists.apache.org/thread.html/c0ec53b72b3240b187afb1cf67e4309a9e5f607282010aa196734814@%3Cgitbox.activemq.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/c0ec53b72b3240b187afb1cf67e4309a9e5f607282010aa196734814@%3Cgitbox.activemq.apache.org%3E
5
reference_url https://lists.apache.org/thread.html/fcbe6ad00f1de142148c20d813fae3765dc4274955e3e2f3ca19ff7b@%3Cdev.activemq.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/fcbe6ad00f1de142148c20d813fae3765dc4274955e3e2f3ca19ff7b@%3Cdev.activemq.apache.org%3E
6
reference_url https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7@%3Ccommits.activemq.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7@%3Ccommits.activemq.apache.org%3E
7
reference_url https://lists.apache.org/thread.html/rb698ed085f79e56146ca24ab359c9ef95846618675ea1ef402e04a6d@%3Ccommits.activemq.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/rb698ed085f79e56146ca24ab359c9ef95846618675ea1ef402e04a6d@%3Ccommits.activemq.apache.org%3E
8
reference_url http://www.securityfocus.com/bid/105156
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/105156
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-8006
reference_id CVE-2018-8006
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-8006
10
reference_url http://activemq.apache.org/security-advisories.data/CVE-2018-8006-announcement.txt
reference_id CVE-2018-8006-ANNOUNCEMENT.TXT
reference_type
scores
url http://activemq.apache.org/security-advisories.data/CVE-2018-8006-announcement.txt
11
reference_url https://github.com/advisories/GHSA-hvwm-2624-rp9x
reference_id GHSA-hvwm-2624-rp9x
reference_type
scores
url https://github.com/advisories/GHSA-hvwm-2624-rp9x
fixed_packages
0
url pkg:maven/org.apache.activemq/activemq-all@5.15.6
purl pkg:maven/org.apache.activemq/activemq-all@5.15.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-all@5.15.6
aliases CVE-2018-8006, GHSA-hvwm-2624-rp9x
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-12vs-qnkd-jkft
1
url VCID-jsj1-6t8v-7bgp
vulnerability_id VCID-jsj1-6t8v-7bgp
summary 
Code Injection
In Apache ActiveMQ, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.
references
0
reference_url http://www.securityfocus.com/bid/107622
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/107622
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-0222
reference_id CVE-2019-0222
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2019-0222
fixed_packages
0
url pkg:maven/org.apache.activemq/activemq-all@5.15.9
purl pkg:maven/org.apache.activemq/activemq-all@5.15.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-all@5.15.9
aliases CVE-2019-0222
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jsj1-6t8v-7bgp
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-all@5.0.0