Lucene search
+L

1823 matches found

Vulnrichment
Vulnrichment
•added 2021/08/23 6:05 p.m.•4 views

CVE-2021-39147 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS0.04735EPSS
SaveExploits1References11
Debian CVE
Debian CVE
•added 2021/08/23 6:05 p.m.•35 views

CVE-2021-39147

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS9AI score0.04735EPSS
SaveExploits1
Mend
Mend
•added 2021/08/23 6:05 p.m.•2 views

CVE-2021-39146

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

9CVSS0.143EPSS
SaveExploits0References18
Cvelist
Cvelist
•added 2021/08/23 6:05 p.m.•39 views

CVE-2021-39146 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS9AI score0.143EPSS
SaveExploits0References11
CVE
CVE
•added 2021/08/23 6:05 p.m.•387 views

CVE-2021-39146

CVE-2021-39146 is an XStream deserialization vulnerability that has been addressed in multiple IBM advisories. The issue allows remote code execution via unsafe object deserialization in XStream across products that bundle the library (e.g., Atlas eDiscovery Process Management, ITNCM, IBM Spectru...

8.5CVSS8.8AI score0.143EPSS
SaveExploits0References11Affected Software1
Vulnrichment
Vulnrichment
•added 2021/08/23 6:05 p.m.•5 views

CVE-2021-39146 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS0.143EPSS
SaveExploits0References11
Debian CVE
Debian CVE
•added 2021/08/23 6:05 p.m.•34 views

CVE-2021-39146

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS9AI score0.143EPSS
SaveExploits0
Mend
Mend
•added 2021/08/23 6:05 p.m.•1 views

CVE-2021-39145

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

9CVSS0.04065EPSS
SaveExploits0References18
Cvelist
Cvelist
•added 2021/08/23 6:05 p.m.•34 views

CVE-2021-39145 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS9AI score0.04065EPSS
SaveExploits0References11
CVE
CVE
•added 2021/08/23 6:05 p.m.•376 views

CVE-2021-39145

The CVE-2021-39145 vulnerability affects the XStream Java library. In affected versions, a remote attacker can load and execute arbitrary code by manipulating the processed input stream. Public advisories reference XStream updates (e.g., Fedora, Debian, Amazon Linux 2) and indicate remediation th...

8.5CVSS8.8AI score0.04065EPSS
SaveExploits0References11Affected Software1
Vulnrichment
Vulnrichment
•added 2021/08/23 6:05 p.m.•4 views

CVE-2021-39145 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS0.04065EPSS
SaveExploits0References11
Debian CVE
Debian CVE
•added 2021/08/23 6:05 p.m.•50 views

CVE-2021-39145

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS9AI score0.04065EPSS
SaveExploits0
Mend
Mend
•added 2021/08/23 6:05 p.m.•1 views

CVE-2021-39141

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

9CVSS0.16118EPSS
SaveExploits2References18
Vulnrichment
Vulnrichment
•added 2021/08/23 6:05 p.m.•5 views

CVE-2021-39141 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS0.16118EPSS
SaveExploits2References11
Cvelist
Cvelist
•added 2021/08/23 6:05 p.m.•41 views

CVE-2021-39141 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS9AI score0.16118EPSS
SaveExploits2References11
CVE
CVE
•added 2021/08/23 6:05 p.m.•397 views

CVE-2021-39141

The CVE-2021-39141 entry concerns the XStream Java library, where an attacker can load and execute arbitrary code by manipulating the processed input stream. Affected versions permit code execution from a remote host; mitigation is to upgrade to XStream 1.4.18, which replaces a reliance on blackl...

8.5CVSS7.5AI score0.16118EPSS
SaveExploits2References11Affected Software1
Debian CVE
Debian CVE
•added 2021/08/23 6:05 p.m.•46 views

CVE-2021-39141

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS8.9AI score0.16118EPSS
SaveExploits2
Vulnrichment
Vulnrichment
•added 2021/08/23 5:55 p.m.•4 views

CVE-2021-39153 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream, if using the version out of the box with Java runtime...

8.5CVSS0.04457EPSS
SaveExploits1References11
Mend
Mend
•added 2021/08/23 5:55 p.m.•2 views

CVE-2021-39153

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream, if using the version out of the box with Java runtime...

9CVSS0.04457EPSS
SaveExploits1References18
Cvelist
Cvelist
•added 2021/08/23 5:55 p.m.•44 views

CVE-2021-39153 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream, if using the version out of the box with Java runtime...

8.5CVSS9.1AI score0.04457EPSS
SaveExploits1References11
Rows per page
Query Builder