https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:05:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-00382 bdu:2019-00382 https://cve.radiocsirt.org/vuln/bdu:2019-00382 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0073 certfr-2023-avi-0073 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0073 https://cve.radiocsirt.org/vuln/cnvd-2018-19512 cnvd-2018-19512 https://cve.radiocsirt.org/vuln/cnvd-2018-19512 https://cve.radiocsirt.org/vuln/euvd-2026-163889 EUVD-2026-163889 https://cve.radiocsirt.org/vuln/euvd-2026-163889 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11775 <p>TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.</p> <p>TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-11775 https://cve.radiocsirt.org/vuln/ghsa-m9w8-v359-9ffr <p><strong>Affected:</strong> Maven: org.apache.activemq:activemq-client</p> <p>TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.</p> <p><strong>Affected:</strong> Maven: org.apache.activemq:activemq-client</p> <p>TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.</p> https://cve.radiocsirt.org/vuln/ghsa-m9w8-v359-9ffr https://cve.radiocsirt.org/vuln/gsd-2018-11775 gsd-2018-11775 https://cve.radiocsirt.org/vuln/gsd-2018-11775 https://cve.radiocsirt.org/vuln/rhsa-2019:3892 <p>jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) infinispan: deserialization of data in XML and JSON transcoders hadoop: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file tomcat: Host name verification missing in WebSocket client jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis activemq: ActiveMQ Client Missing TLS Hostname Verification tika: Incomplete fix allows for XML entity expansion resulting in denial of service jackson-databind: improper polymorphic deserialization of types from Jodd-db library jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver jackson-databind: arbitrary code execution in slf4j-ext class jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes jackson-databind: exfiltration/XXE in some JDK classes jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class jackson-databind: improper polymorphic deserialization in axis2-transport-jms class jackson-databind: improper polymorphic deserialization in openjpa class jackson-databind: improper polymorphic deserialization in jboss-common-core class retrofit: Directory traversal in RequestBuilder allows manipulation of resources zookeeper: Information disclosure in Apa…</p> <p>jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) infinispan: deserialization of data in XML and JSON transcoders hadoop: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file tomcat: Host name verification missing in WebSocket client jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis activemq: ActiveMQ Client Missing TLS Hostname Verification tika: Incomplete fix allows for XML entity expansion resulting in denial of service jackson-databind: improper polymorphic deserialization of types from Jodd-db library jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver jackson-databind: arbitrary code execution in slf4j-ext class jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes jackson-databind: exfiltration/XXE in some JDK classes jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class jackson-databind: improper polymorphic deserialization in axis2-transport-jms class jackson-databind: improper polymorphic deserialization in openjpa class jackson-databind: improper polymorphic deserialization in jboss-common-core class retrofit: Directory traversal in RequestBuilder allows manipulation of resources zookeeper: Information disclosure in Apa…</p> https://cve.radiocsirt.org/vuln/rhsa-2019:3892 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11775 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: activemq</p> <p>TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: activemq</p> <p>TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11775 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0239 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache ActiveMQ ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache ActiveMQ ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0239