Archive
January 2016
Vulnerabilities first published in this month (UTC), newest first.
2 results · Clear filters · Feed
-
Critical 9.8
Improper Input Validation in Apache ActiveMQ
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.
-
Critical 9.8
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and…
KEV Jan 10, 2022