XS
Vendor
XStream
37
CVEs
1
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-41966 | XS Xstream Xstream | 7.5 | Dec 28 | XStream serializes Java objects to XML and back again |
| CVE-2022-40152 | XS Xstream Xstream | 7.5 | Sep 16 | Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled |
| CVE-2022-40151 | XS Xstream Xstream | 7.5 | Sep 16 | Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS) |
| CVE-2021-43859 | XS Xstream Xstream | 7.5 | Feb 1 | XStream is an open source java library to serialize objects to XML and back again |
| CVE-2021-39150 | XS Xstream Xstream | 8.5 | Aug 23 | A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling |
| CVE-2021-39152 | XS Xstream Xstream | 8.5 | Aug 23 | A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling |
| CVE-2021-39140 | XS Xstream Xstream | 6.3 | Aug 23 | XStream can cause a Denial of Service |
| CVE-2021-39149 | XS Xstream Xstream | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-39148 | XS Xstream Xstream | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-39147 | XS Xstream Xstream | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-39146 | XS Xstream Xstream | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-39145 | XS Xstream Xstream | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-39141 | XS Xstream Xstream | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-39153 | XS Xstream Xstream | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-39151 | XS Xstream Xstream | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-39139 | XS Xstream Xstream | 8.8 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-39154 | XS Xstream Xstream | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-39144 In wildKEV | XS Xstream Xstream | 8.5 | Aug 23 | XStream is vulnerable to a Remote Command Execution attack |
| CVE-2021-29505 | XS Xstream Xstream | 8.8 | May 28 | XStream is vulnerable to a Remote Command Execution attack |
| CVE-2021-21348 | XS Xstream Xstream | 7.5 | Mar 22 | XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) |
| CVE-2021-21349 | XS Xstream Xstream | 8.6 | Mar 22 | A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host |
| CVE-2021-21350 | XS Xstream Xstream | 9.8 | Mar 22 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-21351 | XS Xstream Xstream | 9.1 | Mar 22 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-21341 | XS Xstream Xstream | 7.5 | Mar 22 | XStream can cause a Denial of Service |
| CVE-2021-21342 | XS Xstream Xstream | 9.1 | Mar 22 | A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host |
| CVE-2021-21343 | XS Xstream Xstream | 7.5 | Mar 22 | XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights |
| CVE-2021-21344 | XS Xstream Xstream | 9.8 | Mar 22 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-21345 | XS Xstream Xstream | 9.9 | Mar 22 | XStream is vulnerable to a Remote Command Execution attack |
| CVE-2021-21346 | XS Xstream Xstream | 9.8 | Mar 22 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2021-21347 | XS Xstream Xstream | 9.8 | Mar 22 | XStream is vulnerable to an Arbitrary Code Execution attack |
| CVE-2020-26258 | XS Xstream Xstream | 7.7 | Dec 16 | Server-Side Forgery Request can be activated unmarshalling with XStream |
| CVE-2020-26259 | XS Xstream Xstream | 6.8 | Dec 16 | XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling |
| CVE-2020-26217 | XS Xstream Xstream | 8.8 | Nov 16 | Remote Code Execution in XStream |
| CVE-2019-10173 | XS Xstream Xstream | 9.8 | Jul 23 | It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw |
| CVE-2013-7285 | XS Xstream Xstream | 9.8 | May 15 | Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by… |
| CVE-2017-7957 | XS Xstream Xstream | 7.5 | Apr 29 | XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a… |
| CVE-2016-3674 | XS Xstream Xstream | 7.5 | May 17 | Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7)… |