Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetchCheck if you run itEPSS 0.20%Sep 23, 2026
- High7.3RabbitMQ: Stored XSS via TLS peer-certificate DN in management UICheck if you run itEPSS 0.15%Sep 23, 2026
- High8.2RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoSCheck if you run itEPSS 0.32%Sep 23, 2026
- High7.6RabbitMQ: CORS * reflects Origin with Allow-CredentialsCheck if you run itEPSS 0.37%Sep 23, 2026
- High7.1RabbitMQ: Atom-table exhaustion via reply-to queue name decodingCheck if you run itEPSS 0.39%Sep 23, 2026
- Medium5.0RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.41%Jul 10, 2026
- High7.5RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 2.84%Jul 10, 2026
- High8.8Use of default credentials vulnerability in Roche Diagnostics navify Digital Pathology (RabbitMQ Management interface modules) allows Default Usernames and Passwords.Check if you run itEPSS 0.24%Jun 2, 2026
- High7.8A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.Check if you run itEPSS 0.14%May 26, 2026
- High8.3Active debug code exists in the ARN resolver of amazon-mq rabbitmq-aws before version 0.2.1.Check if you run itEPSS 1.11%May 20, 2026
- Critical9.1When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker.Check if you run itEPSS 0.16%Apr 27, 2026
Sort