CVE search

402.740 vulnerabilities · 1.766 actively exploited (CISA KEV)

155 results

ID	Severity	Summary	Published
CVE-2021-21343	HOCH7.5	XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. A	23/03/2021
CVE-2021-21342	KRITISCH9.1	XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. A	23/03/2021
CVE-2021-21341	HOCH7.5	XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulat