https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:23:05.884528+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-105611 EUVD-2026-105611 2026-10-02T23:23:05.889112+00:00 EUVD-2026-105611 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1768 fkie_cve-2013-1768 2026-10-02T23:23:05.889144+00:00

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.

 https://cve.radiocsirt.org/vuln/ghsa-j65f-mvgw-prp2 GHSA-j65f-mvgw-prp2 — Deserialization of Untrusted Data in Apache OpenJPA 2026-10-02T23:23:05.889175+00:00

Affected: Maven: org.apache.openjpa:openjpa

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.

 https://cve.radiocsirt.org/vuln/gsd-2013-1768 gsd-2013-1768 2026-10-02T23:23:05.889199+00:00 gsd-2013-1768 https://cve.radiocsirt.org/vuln/rhsa-2013:1185 RHSA-2013:1185 — Red Hat Security Advisory: Red Hat JBoss Fuse 6.0.0 patch 2 2026-10-02T23:23:05.889210+00:00

rubygem-json: Denial of Service and SQL Injection openjpa: Remote arbitrary code execution by creating a serialized object and leveraging improperly secured server programs ruby: entity expansion DoS vulnerability in REXML apache-cxf: Multiple denial of service flaws in the StAX parser

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-1768 Withdrawn: UBUNTU-CVE-2013-1768 2026-10-02T23:23:05.889229+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: openjpa, Ubuntu:16.04:LTS: openjpa

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.