Skip to content
OpenAdvisories

Archive

January 2016

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2015-5254 Public exploit EPSS 38%

    Improper Input Validation in Apache ActiveMQ

    Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.

  • Critical 9.8
    CVE-2015-7450 Exploited Public exploit Scanner template EPSS 98%

    Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and…

    KEV Jan 10, 2022