Lucene search
+L

3 matches found

CNNVD
CNNVD
added 2021/03/22 12:0 a.m.5 views

XStream 代码问题漏洞

XStream is a simple Java-based library , Java objects serialized to xml and vice versa i.e. : Java objects and xml documents can be easily converted to each other . A code execution vulnerability exists in XStream, which can be exploited by an attacker to manipulate the processed input stream and...

9.8CVSS8.5AI score0.7598EPSS
SaveExploits1References48
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.4 views

XStream 代码问题漏洞

XStream is a simple Java-based library , Java objects serialized to xml and vice versa i.e. : Java objects and xml documents can easily be converted to each other . XStream has a server-side request forgery vulnerability that can be exploited by an attacker to manipulate the processed input strea...

8.6CVSS8.2AI score0.46826EPSS
SaveExploits1References44
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.9 views

The vulnerability of the PHPMailer library, related to incorrect input data validation, allows attackers to inject objects into the system.

The vulnerability of the PHPMailer library is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to inject objects into the system...

8.8CVSS6.5AI score0.02211EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder