https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:30:49.576679+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05661 bdu:2026-05661 2026-10-03T02:30:49.717974+00:00 bdu:2026-05661 https://cve.radiocsirt.org/vuln/cnvd-2016-00174 cnvd-2016-00174 2026-10-03T02:30:49.718014+00:00 cnvd-2016-00174 https://cve.radiocsirt.org/vuln/euvd-2026-93254 EUVD-2026-93254 2026-10-03T02:30:49.718029+00:00 EUVD-2026-93254 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5254 fkie_cve-2015-5254 2026-10-03T02:30:49.718040+00:00

Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.

 https://cve.radiocsirt.org/vuln/ghsa-q9hr-3pg4-3jp4 GHSA-q9hr-3pg4-3jp4 — Improper Input Validation in Apache ActiveMQ 2026-10-03T02:30:49.718069+00:00

Affected: Maven: org.apache.activemq:activemq-client

Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.

 https://cve.radiocsirt.org/vuln/gsd-2015-5254 gsd-2015-5254 2026-10-03T02:30:49.718093+00:00 gsd-2015-5254 https://cve.radiocsirt.org/vuln/rhsa-2016:0489 RHSA-2016:0489 — Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.2.9 security, bug fix, and enhancement update 2026-10-03T02:30:49.718104+00:00

ObjectMessage: unsafe deserialization jenkins: Project name disclosure via fingerprints (SECURITY-153) jenkins: Public value used for CSRF protection salt (SECURITY-169) jenkins: XXE injection into job configurations via CLI (SECURITY-173) jenkins: Secret key not verified when connecting a slave (SECURITY-184) jenkins: Information disclosure via sidepanel (SECURITY-192) jenkins: Local file inclusion vulnerability (SECURITY-195) jenkins: API tokens of other users available to admins (SECURITY-200) jenkins: Queue API did show items not visible to the current user (SECURITY-186) jenkins: JNLP slaves not subject to slave-to-master access control (SECURITY-206) jenkins: Stored XSS vulnerability in slave offline status message (SECURITY-214) jenkins: CSRF vulnerability in some administrative actions (SECURITY-225) jenkins: CSRF protection ineffective (SECURITY-233) jenkins: Jenkins plugin manager vulnerable to MITM attacks (SECURITY-234) jenkins: Remote code execution vulnerability due to unsafe deserialization in Jenkins remoting (SECURITY-218)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5254 UBUNTU-CVE-2015-5254 2026-10-03T02:30:49.718147+00:00

Affected: Ubuntu:14.04:LTS: activemq

Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.