Skip to content
OpenAdvisories

Archive

8 January 2016

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2015-5254 Public exploit EPSS 38%

    Improper Input Validation in Apache ActiveMQ

    Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.