Skip to content
OpenAdvisories

Archive

28 March 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.5
    CVE-2019-0222 Public exploit EPSS 12%

    Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client

    In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

  • High 7.5
    CVE-2019-0225 Public exploit

    Improper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-war

    A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details.