https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:05:26.640919+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-00382 bdu:2019-00382 2026-10-03T03:05:26.647658+00:00 bdu:2019-00382 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0073 certfr-2023-avi-0073 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T03:05:26.647694+00:00 certfr-2023-avi-0073 https://cve.radiocsirt.org/vuln/cnvd-2018-19512 cnvd-2018-19512 2026-10-03T03:05:26.647713+00:00 cnvd-2018-19512 https://cve.radiocsirt.org/vuln/euvd-2026-163889 EUVD-2026-163889 2026-10-03T03:05:26.647733+00:00 EUVD-2026-163889 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11775 fkie_cve-2018-11775 2026-10-03T03:05:26.647746+00:00

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.

 https://cve.radiocsirt.org/vuln/ghsa-m9w8-v359-9ffr GHSA-m9w8-v359-9ffr — Improper Certificate Validation in Apache activemq-client 2026-10-03T03:05:26.647797+00:00

Affected: Maven: org.apache.activemq:activemq-client

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.

 https://cve.radiocsirt.org/vuln/gsd-2018-11775 gsd-2018-11775 2026-10-03T03:05:26.647833+00:00 gsd-2018-11775 https://cve.radiocsirt.org/vuln/rhsa-2019:3892 RHSA-2019:3892 — Red Hat Security Advisory: Red Hat Fuse 7.5.0 security update 2026-10-03T03:05:26.647844+00:00

jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) infinispan: deserialization of data in XML and JSON transcoders hadoop: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file tomcat: Host name verification missing in WebSocket client jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis activemq: ActiveMQ Client Missing TLS Hostname Verification tika: Incomplete fix allows for XML entity expansion resulting in denial of service jackson-databind: improper polymorphic deserialization of types from Jodd-db library jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver jackson-databind: arbitrary code execution in slf4j-ext class jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes jackson-databind: exfiltration/XXE in some JDK classes jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class jackson-databind: improper polymorphic deserialization in axis2-transport-jms class jackson-databind: improper polymorphic deserialization in openjpa class jackson-databind: improper polymorphic deserialization in jboss-common-core class retrofit: Directory traversal in RequestBuilder allows manipulation of resources zookeeper: Information disclosure in Apa…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11775 UBUNTU-CVE-2018-11775 2026-10-03T03:05:26.647892+00:00

Affected: Ubuntu:Pro:16.04:LTS: activemq

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0239 WID-SEC-W-2024-0239 — Apache ActiveMQ: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T03:05:26.647912+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache ActiveMQ ausnutzen, um Sicherheitsvorkehrungen zu umgehen.