Skip to content
OpenAdvisories

Archive

27 October 2023

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2023-46604 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

    The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class …

    KEV Nov 2, 2023