Lucene search
+L

12532 matches found

Prion
Prion
•added 2021/08/23 6:15 p.m.•32 views

Code injection

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

6CVSS8.7AI score0.04735EPSS
SaveExploits1References11Affected Software14
UbuntuCve
UbuntuCve
•added 2021/08/23 6:15 p.m.•36 views

CVE-2021-39154

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.2AI score0.04735EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2021/08/23 6:15 p.m.•13 views

UBUNTU-CVE-2021-39147

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.2AI score0.04735EPSS
SaveExploits1References5
Prion
Prion
•added 2021/08/23 6:15 p.m.•34 views

Code injection

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

6CVSS8.7AI score0.143EPSS
SaveExploits0References11Affected Software14
UbuntuCve
UbuntuCve
•added 2021/08/23 6:15 p.m.•41 views

CVE-2021-39147

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS7.2AI score0.04735EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/08/23 6:05 p.m.•46 views

CVE-2021-39149 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS9AI score0.04735EPSS
SaveExploits1References11
CVE
CVE
•added 2021/08/23 6:05 p.m.•381 views

CVE-2021-39149

CVE-2021-39149 affects the XStream Java serialization library. The vulnerability permits a remote attacker to load and execute arbitrary code by manipulating the processed input stream. The issue is tied to XStream’s input handling and the move away from blacklist-based security (1.4.18), relying...

8.5CVSS7.6AI score0.04735EPSS
SaveExploits1References11Affected Software1
Vulnrichment
Vulnrichment
•added 2021/08/23 6:05 p.m.•5 views

CVE-2021-39149 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS0.04735EPSS
SaveExploits1References11
Mend
Mend
•added 2021/08/23 6:05 p.m.•4 views

CVE-2021-39149

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

9CVSS0.04735EPSS
SaveExploits1References18
CVE
CVE
•added 2021/08/23 6:05 p.m.•356 views

CVE-2021-39148

Summary: CVE-2021-39148 affects XStream, a Java XML-serialization library. Multiple connected advisories confirm a remote code-execution risk by manipulating the processed input stream, with the attacker able to load and execute arbitrary code from a remote host. The issue is tied to how XStream ...

8.5CVSS8.8AI score0.04735EPSS
SaveExploits1References11Affected Software1
Debian CVE
Debian CVE
•added 2021/08/23 6:05 p.m.•49 views

CVE-2021-39148

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS9AI score0.04735EPSS
SaveExploits1
Cvelist
Cvelist
•added 2021/08/23 6:05 p.m.•45 views

CVE-2021-39148 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS9AI score0.04735EPSS
SaveExploits1References11
Mend
Mend
•added 2021/08/23 6:05 p.m.•4 views

CVE-2021-39148

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

9CVSS0.04735EPSS
SaveExploits1References18
Vulnrichment
Vulnrichment
•added 2021/08/23 6:05 p.m.•5 views

CVE-2021-39148 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS0.04735EPSS
SaveExploits1References11
Mend
Mend
•added 2021/08/23 6:05 p.m.•5 views

CVE-2021-39147

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

9CVSS0.04735EPSS
SaveExploits1References18
Cvelist
Cvelist
•added 2021/08/23 6:05 p.m.•40 views

CVE-2021-39147 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS9AI score0.04735EPSS
SaveExploits1References11
Vulnrichment
Vulnrichment
•added 2021/08/23 6:05 p.m.•5 views

CVE-2021-39147 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS0.04735EPSS
SaveExploits1References11
Debian CVE
Debian CVE
•added 2021/08/23 6:05 p.m.•36 views

CVE-2021-39147

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS9AI score0.04735EPSS
SaveExploits1
Mend
Mend
•added 2021/08/23 6:05 p.m.•6 views

CVE-2021-39146

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

9CVSS0.143EPSS
SaveExploits0References18
Vulnrichment
Vulnrichment
•added 2021/08/23 6:05 p.m.•6 views

CVE-2021-39146 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

8.5CVSS0.143EPSS
SaveExploits0References11
Rows per page
Query Builder