Lucene search
+L

805 matches found

ATTACKERKB
ATTACKERKB
added 2021/09/14 12:15 p.m.7 views

CVE-2021-38174

When a user opens manipulated files received from untrusted sources in SAP 3D Visual Enterprise Viewer version - 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

6.5CVSS6.2AI score0.00761EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/09/14 11:25 a.m.37 views

CVE-2021-38174

When a user opens manipulated files received from untrusted sources in SAP 3D Visual Enterprise Viewer version - 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

4.3CVSS6.7AI score0.00761EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/09/14 11:19 a.m.34 views

CVE-2021-38176

Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could...

9.9CVSS9.1AI score0.01268EPSS
SaveExploits0References2
Code423n4
Code423n4
added 2021/09/08 12:00 a.m.17 views

Liquidity token value can be manipulated

Handle cmichel Vulnerability details Vulnerability Details The liquidity token value AssetHandler.getLiquidityTokenValue is the sum of the value of the individual claims on cash underlying or rather cTokens and fCash. The amount to redeem on each of these is computed as the LP token to redeem...

6.7AI score
SaveExploits0
OSV
OSV
added 2021/08/25 2:48 p.m.6 views

GHSA-64XX-CQ4Q-MF44 XStream is vulnerable to an Arbitrary Code Execution attack

Impact The vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. A user is only affected if using the version out of the box with JDK 1.7u21 or below. However, this scenario can be adjusted easily to an...

8.5CVSS7.2AI score0.0454EPSS
SaveExploits0References13
OSV
OSV
added 2021/08/25 2:48 p.m.13 views

GHSA-8JRJ-525P-826V XStream is vulnerable to an Arbitrary Code Execution attack

Impact The vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required...

8.5CVSS7.2AI score0.04065EPSS
SaveExploits0References13
OSV
OSV
added 2021/08/25 2:47 p.m.11 views

GHSA-H7V4-7XG3-HXCC XStream is vulnerable to an Arbitrary Code Execution attack

Impact The vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required...

8.5CVSS7.5AI score0.04735EPSS
SaveExploits1References13
OSV
OSV
added 2021/08/25 2:47 p.m.10 views

GHSA-QRX8-8545-4WG2 XStream is vulnerable to an Arbitrary Code Execution attack

Impact The vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required...

8.5CVSS7.5AI score0.04735EPSS
SaveExploits1References13
OSV
OSV
added 2021/08/25 2:47 p.m.14 views

GHSA-3CCQ-5VW3-2P6X XStream is vulnerable to an Arbitrary Code Execution attack

Impact The vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required...

8.5CVSS7.2AI score0.04735EPSS
SaveExploits1References13
OSV
OSV
added 2021/08/25 2:47 p.m.12 views

GHSA-HPH2-M3G5-XXV4 XStream is vulnerable to an Arbitrary Code Execution attack

Impact The vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required...

8.5CVSS7.5AI score0.04735EPSS
SaveExploits1References13
NVD
NVD
added 2021/08/23 6:15 p.m.28 views

CVE-2021-39148

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS0.04735EPSS
SaveExploits1References11
OSV
OSV
added 2021/08/23 6:15 p.m.2 views

DEBIAN-CVE-2021-39144

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.7AI score0.98124EPSS
SaveExploits6References1
OSV
OSV
added 2021/08/23 6:15 p.m.5 views

DEBIAN-CVE-2021-39148

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.8AI score0.04735EPSS
SaveExploits1References1
NVD
NVD
added 2021/08/23 6:15 p.m.27 views

CVE-2021-39144

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS0.98124EPSS
SaveExploits6References13
OSV
OSV
added 2021/08/23 6:15 p.m.4 views

DEBIAN-CVE-2021-39145

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.7AI score0.04065EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/23 6:15 p.m.32 views

CVE-2021-39147

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.7AI score
SaveExploits0References11
OSV
OSV
added 2021/08/23 6:15 p.m.8 views

UBUNTU-CVE-2021-39146

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.2AI score0.143EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2021/08/23 6:15 p.m.7 views

CVE-2021-39141

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS6.3AI score0.16118EPSS
SaveExploits2References16Affected Software1
OSV
OSV
added 2021/08/23 6:15 p.m.7 views

UBUNTU-CVE-2021-39149

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.2AI score0.04735EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2021/08/23 6:15 p.m.8 views

CVE-2021-39145

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS6.3AI score0.04065EPSS
SaveExploits0References15Affected Software1
Rows per page
Query Builder