Most recent entries from all

bdu:2018-00148

cnvd-2016-04908

EUVD-2026-215899

fkie_cve-2016-5003

The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.

GHSA-4gqp-296r-j5mq — Apache XML-RPC vulnerable to Deserialization of Untrusted Data

Affected: Maven: org.apache.xmlrpc:xmlrpc

The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.

gsd-2016-5003

RHSA-2018:1779 — Red Hat Security Advisory: xmlrpc3 security update

xmlrpc: Deserialization of untrusted Java object through <ex:serializable> tag

RHSA-2018:1780 — Red Hat Security Advisory: xmlrpc security update

xmlrpc: Deserialization of untrusted Java object through <ex:serializable> tag