Approved changes feed: RSS · Atom

cpe:2.3:a:emqx:neuron:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEmqx (3815afa5-363a-5807-a62b-81827f994785)
ProductNeuron (bd4c8c47-1c34-5e43-81ab-ee6fbd8db765)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:gitee/emqx/neuron purl2cpe 2026-06-01 10:13:30.409741
pkg:github/emqx/neuron purl2cpe 2026-06-01 10:13:30.409742

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10965 vulnerable 2026-06-08 06:23:48.289515 emqx neuron JSON File schema information disclosure
MEDIUM (4.3)
A vulnerability classified as problematic was found in emqx neuron up to 2.10.0. Affected by this vulnerability is an unknown functionality of the file /api/v2/schema of the component JSON File Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The patch is named c9ce39747e0372aaa2157b2b56174914a12c06d8. It is recommended to apply a patch to fix this issue.
Published: 2024-11-07T17:00:12.641Z
Updated: 2024-11-08T16:43:43.952Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10964 vulnerable 2026-06-08 06:23:48.288739 emqx neuron plugin_handle.c handle_add_plugin buffer overflow
MEDIUM (6.3)
A vulnerability classified as critical has been found in emqx neuron up to 2.10.0. Affected is the function handle_add_plugin in the library cmd.library of the file plugins/restful/plugin_handle.c. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.
Published: 2024-11-07T17:00:09.615Z
Updated: 2024-11-08T16:54:35.833Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.