CVE search

402,876 vulnerabilities · 1,766 actively exploited (CISA KEV)

155 results

ID	Severity	Summary	Published
CVE-2021-21343	高危7.5	XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. A	23/03/2021
CVE-2021-21342	严重9.1	XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. A	23/03/2021
CVE-2021-21341	高危7.5	XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulat