https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:23:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-105611 EUVD-2026-105611 https://cve.radiocsirt.org/vuln/euvd-2026-105611 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1768 <p>The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.</p> <p>The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-1768 https://cve.radiocsirt.org/vuln/ghsa-j65f-mvgw-prp2 <p><strong>Affected:</strong> Maven: org.apache.openjpa:openjpa</p> <p>The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.</p> <p><strong>Affected:</strong> Maven: org.apache.openjpa:openjpa</p> <p>The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.</p> https://cve.radiocsirt.org/vuln/ghsa-j65f-mvgw-prp2 https://cve.radiocsirt.org/vuln/gsd-2013-1768 gsd-2013-1768 https://cve.radiocsirt.org/vuln/gsd-2013-1768 https://cve.radiocsirt.org/vuln/rhsa-2013:1185 <p>rubygem-json: Denial of Service and SQL Injection openjpa: Remote arbitrary code execution by creating a serialized object and leveraging improperly secured server programs ruby: entity expansion DoS vulnerability in REXML apache-cxf: Multiple denial of service flaws in the StAX parser</p> <p>rubygem-json: Denial of Service and SQL Injection openjpa: Remote arbitrary code execution by creating a serialized object and leveraging improperly secured server programs ruby: entity expansion DoS vulnerability in REXML apache-cxf: Multiple denial of service flaws in the StAX parser</p> https://cve.radiocsirt.org/vuln/rhsa-2013:1185 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-1768 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: openjpa, Ubuntu:16.04:LTS: openjpa</p> <p>The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: openjpa, Ubuntu:16.04:LTS: openjpa</p> <p>The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-1768