Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 10:14:04 +0000 CVE-2016-9877 https://vulnerability.circl.lu/vuln/cve-2016-9877 <p><strong>Affected:</strong> Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6; RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12 and 1.7.x before 1.7.7</p> <p>An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport) connection authentication with a username/password pair succeeds if an existing username is provided but the password is omitted from the connection request. Connections that use TLS with a client-provided certificate are not affected.</p> <p><strong>Affected:</strong> Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6; RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12 and 1.7.x before 1.7.7</p> <p>An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport) connection authentication with a username/password pair succeeds if an existing username is provided but the password is omitted from the connection request. Connections that use TLS with a client-provided certificate are not affected.</p> https://vulnerability.circl.lu/vuln/cve-2016-9877 USN-3374-1 — rabbitmq-server vulnerability https://vulnerability.circl.lu/vuln/usn-3374-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: rabbitmq-server, Ubuntu:16.04:LTS: rabbitmq-server</p> <p>It was discovered that RabbitMQ incorrectly handled MQTT (MQ Telemetry Transport) authentication. A remote attacker could use this issue to authenticate successfully with an existing username by omitting the password.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: rabbitmq-server, Ubuntu:16.04:LTS: rabbitmq-server</p> <p>It was discovered that RabbitMQ incorrectly handled MQTT (MQ Telemetry Transport) authentication. A remote attacker could use this issue to authenticate successfully with an existing username by omitting the password.</p> https://vulnerability.circl.lu/vuln/usn-3374-1