https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:15:29 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-08455 cnvd-2016-08455 https://cve.radiocsirt.org/vuln/cnvd-2016-08455 https://cve.radiocsirt.org/vuln/euvd-2026-84878 EUVD-2026-84878 https://cve.radiocsirt.org/vuln/euvd-2026-84878 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4978 <p>The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget classes being present on the Artemis classpath.</p> <p>The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget classes being present on the Artemis classpath.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-4978 https://cve.radiocsirt.org/vuln/ghsa-r9vv-xj4w-g8m8 <p><strong>Affected:</strong> Maven: org.apache.activemq:artemis-pom</p> <p>The getObject method of the `javax.jms.ObjectMessage` class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget classes being present on the Artemis classpath.</p> <p><strong>Affected:</strong> Maven: org.apache.activemq:artemis-pom</p> <p>The getObject method of the `javax.jms.ObjectMessage` class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget classes being present on the Artemis classpath.</p> https://cve.radiocsirt.org/vuln/ghsa-r9vv-xj4w-g8m8 https://cve.radiocsirt.org/vuln/gsd-2016-4978 gsd-2016-4978 https://cve.radiocsirt.org/vuln/gsd-2016-4978 https://cve.radiocsirt.org/vuln/rhsa-2017:1834 <p>Artemis: Deserialization of untrusted input vulnerability jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper</p> <p>Artemis: Deserialization of untrusted input vulnerability jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper</p> https://cve.radiocsirt.org/vuln/rhsa-2017:1834 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2752 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2752