Lucene search
+L

124 matches found

OSV
OSV
added 2021/08/23 7:15 p.m.3 views

DEBIAN-CVE-2021-39152

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java runtime version 14 to 8. ...

8.5CVSS7.2AI score0.11377EPSS
SaveExploits2References1
NVD
NVD
added 2021/08/23 7:15 p.m.24 views

CVE-2021-39140

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by...

6.5CVSS0.05918EPSS
SaveExploits1References11
OSV
OSV
added 2021/08/23 7:15 p.m.22 views

CVE-2021-39140

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by...

6.3CVSS7AI score0.05918EPSS
SaveExploits1References11
Prion
Prion
added 2021/08/23 7:15 p.m.23 views

Design/Logic Flaw

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by...

6.3CVSS7.1AI score0.05918EPSS
SaveExploits1References11Affected Software14
ATTACKERKB
ATTACKERKB
added 2021/08/23 7:15 p.m.7 views

CVE-2021-39150

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java runtime version 14 to 8. ...

8.5CVSS6AI score0.03437EPSS
SaveExploits2References15Affected Software1
NVD
NVD
added 2021/08/23 6:15 p.m.15 views

CVE-2021-39154

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS0.04735EPSS
SaveExploits1References11
OSV
OSV
added 2021/08/23 6:15 p.m.1 views

DEBIAN-CVE-2021-39154

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.7AI score0.04735EPSS
SaveExploits1References1
NVD
NVD
added 2021/08/23 6:15 p.m.20 views

CVE-2021-39151

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS0.04735EPSS
SaveExploits1References11
OSV
OSV
added 2021/08/23 6:15 p.m.25 views

CVE-2021-39149

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.7AI score0.04735EPSS
SaveExploits1References11
OSV
OSV
added 2021/08/23 6:15 p.m.2 views

DEBIAN-CVE-2021-39146

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.7AI score0.143EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/23 6:15 p.m.33 views

CVE-2021-39145

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.7AI score0.04065EPSS
SaveExploits0References11
OSV
OSV
added 2021/08/23 6:15 p.m.1 views

DEBIAN-CVE-2021-39151

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.7AI score0.04735EPSS
SaveExploits1References1
OSV
OSV
added 2021/08/23 6:15 p.m.37 views

CVE-2021-39146

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.7AI score0.143EPSS
SaveExploits0References11
NVD
NVD
added 2021/08/23 6:15 p.m.30 views

CVE-2021-39139

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. A user is only affected if using the version out of th...

8.8CVSS0.0454EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
added 2021/08/23 6:15 p.m.43 views

CVE-2021-39141

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.2AI score0.16118EPSS
SaveExploits2References4
Prion
Prion
added 2021/08/23 6:15 p.m.22 views

Code injection

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

6CVSS8.7AI score0.04735EPSS
SaveExploits1References11Affected Software14
UbuntuCve
UbuntuCve
added 2021/08/23 6:15 p.m.34 views

CVE-2021-39147

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.2AI score0.04735EPSS
SaveExploits1References4
Prion
Prion
added 2021/08/23 6:15 p.m.26 views

Code injection

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

6CVSS8.7AI score0.04065EPSS
SaveExploits0References11Affected Software14
UbuntuCve
UbuntuCve
added 2021/08/23 6:15 p.m.37 views

CVE-2021-39146

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.2AI score0.143EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/08/23 6:15 p.m.5 views

CVE-2021-39146

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS6.3AI score0.143EPSS
SaveExploits0References16Affected Software1
Rows per page
Query Builder