Lucene search
+L

12 matches found

osv_ghsa
osv_ghsa
•added 2022/05/14 3:30 a.m.•44 views

GHSA-J65F-MVGW-PRP2 Deserialization of Untrusted Data in Apache OpenJPA

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...

7.5CVSS7.5AI score0.09511EPSS
SaveExploits0References17
Github Security Blog
Github Security Blog
•added 2022/05/14 3:30 a.m.•49 views

Deserialization of Untrusted Data in Apache OpenJPA

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...

7.5CVSS4.7AI score0.09511EPSS
SaveExploits0References17Affected Software1
osv_ubuntu
osv_ubuntu
•added 2013/07/11 10:55 p.m.•14 views

UBUNTU-CVE-2013-1768

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...

7.5CVSS7.6AI score0.09511EPSS
SaveExploits0References17
Prion
Prion
•added 2013/07/11 10:55 p.m.•31 views

Deserialization of untrusted data

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...

7.5CVSS7.8AI score0.09511EPSS
SaveExploits0References19Affected Software1
UbuntuCve
UbuntuCve
•added 2013/07/11 10:55 p.m.•53 views

CVE-2013-1768

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...

7.5CVSS7.5AI score0.09511EPSS
SaveExploits0References16
osv_debian
osv_debian
•added 2013/07/11 10:55 p.m.•12 views

DEBIAN-CVE-2013-1768

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...

7.5CVSS8.8AI score0.09511EPSS
SaveExploits0References1
NVD
NVD
•added 2013/07/11 10:55 p.m.•35 views

CVE-2013-1768

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...

7.5CVSS8.4AI score0.09511EPSS
SaveExploits0References19
Cvelist
Cvelist
•added 2013/07/11 10:00 p.m.•65 views

CVE-2013-1768

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...

8.9AI score0.09511EPSS
SaveExploits0References19
Mend
Mend
•added 2013/07/11 10:00 p.m.•7 views

CVE-2013-1768

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...

7.5CVSS0.09511EPSS
SaveExploits0References25
Debian CVE
Debian CVE
•added 2013/07/11 10:00 p.m.•70 views

CVE-2013-1768

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...

7.5CVSS8.9AI score0.09511EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2013/07/11 12:00 a.m.•6 views

PT-2013-3380

Name of the Vulnerable Software and Affected Versions Apache OpenJPA versions 1.x through 1.2.2 Apache OpenJPA versions 2.x through 2.2.1 Description The issue allows remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs. This...

7.5CVSS0.09511EPSS
SaveExploits0References37
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/07/11 12:00 a.m.•9 views

CVE-2013-1768: Undefined Security Weakness

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...

7.5CVSS6.5AI score0.09511EPSS
SaveExploits0References2
Rows per page
Query Builder