xstream kayıtları

xstream üreticisine ait 37 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 1 · %2,7
Silahlaştırılmış: 1 · %2,7
Pre-auth RCE: 7
Düzeltme kaydı olan: %100
Yayından KEV’e ortanca: 564 gün

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

37 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
93Hemen	CVE-2021-39144Silahlaştırılmış	XStream is vulnerable to a Remote Command Execution attackxstream · xstream · CWE-94 RCE	Yüksek8,5	KEV	%98,1	23 Ağu 2021
68Bu hafta	CVE-2019-10173İstismar yok	It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw.xstream · xstream · CWE-94 pre-auth RCE Deserializasyon	Kritik9,8	—	%95,0	23 Tem 2019
64Bu hafta	CVE-2013-7285Kavram kanıtı	Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run xstream · xstream · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik9,8	—	%84,4	15 May 2019
62Bu hafta	CVE-2021-21346İstismar yok	XStream is vulnerable to an Arbitrary Code Execution attackxstream · xstream · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%76,4	22 Mar 2021
62Bu hafta	CVE-2021-21344İstismar yok	XStream is vulnerable to an Arbitrary Code Execution attackxstream · xstream · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%76,0	22 Mar 2021
61Bu hafta	CVE-2020-26217Kavram kanıtı	Remote Code Execution in XStreamxstream · xstream · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%85,0	16 Kas 2020
61Bu hafta	CVE-2021-21351Kavram kanıtı	XStream is vulnerable to an Arbitrary Code Execution attackxstream · xstream · CWE-434 RCE Dosya yükleme	Kritik9,1	—	%82,1	22 Mar 2021
61Bu hafta	CVE-2021-21345Kavram kanıtı	XStream is vulnerable to a Remote Command Execution attackxstream · xstream · CWE-94 RCE	Kritik9,9	—	%72,3	22 Mar 2021
58Planlayın	CVE-2021-29505Kavram kanıtı	XStream is vulnerable to a Remote Command Execution attackxstream · xstream · CWE-94 RCE	Yüksek8,8	—	%77,2	28 May 2021
55Planlayın	CVE-2020-26258Kavram kanıtı	Server-Side Forgery Request can be activated unmarshalling with XStreamxstream · xstream · CWE-918 SSRF	Yüksek7,7	—	%81,8	15 Ara 2020
53Planlayın	CVE-2021-21341Kavram kanıtı	XStream can cause a Denial of Servicexstream · xstream · CWE-400 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%77,8	22 Mar 2021
52Planlayın	CVE-2020-26259Kavram kanıtı	XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshallingxstream · xstream · CWE-78 pre-auth RCE Komut enjeksiyonu	Orta6,8	—	%82,4	15 Ara 2020
51Planlayın	CVE-2021-21342İstismar yok	A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or xstream · xstream · CWE-502 Kimlik doğrulamasız Deserializasyon	Kritik9,1	—	%50,0	22 Mar 2021
48Planlayın	CVE-2021-21349Kavram kanıtı	A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or xstream · xstream · CWE-502 Kimlik doğrulamasız Deserializasyon	Yüksek8,6	—	%46,8	22 Mar 2021
44Planlayın	CVE-2021-21343İstismar yok	XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rightsxstream · xstream · CWE-73 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%46,7	22 Mar 2021
44Planlayın	CVE-2021-21350İstismar yok	XStream is vulnerable to an Arbitrary Code Execution attackxstream · xstream · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%15,2	22 Mar 2021
43Planlayın	CVE-2021-21347İstismar yok	XStream is vulnerable to an Arbitrary Code Execution attackxstream · xstream · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%14,3	22 Mar 2021
39İzleyin	CVE-2021-39141Kavram kanıtı	XStream is vulnerable to an Arbitrary Code Execution attackxstream · xstream · CWE-434 RCE Dosya yükleme	Yüksek8,5	—	%16,1	23 Ağu 2021
38İzleyin	CVE-2021-39146Kavram kanıtı	XStream is vulnerable to an Arbitrary Code Execution attackxstream · xstream · CWE-434 RCE Dosya yükleme	Yüksek8,5	—	%14,3	23 Ağu 2021
37İzleyin	CVE-2021-39152Kavram kanıtı	A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshalingxstream · xstream · CWE-502 Deserializasyon	Yüksek8,5	—	%11,4	23 Ağu 2021
36İzleyin	CVE-2022-40152İstismar yok	Stack Buffer Overflow in Woodstoxxstream · xstream · CWE-121 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Yüksek7,5	—	%19,7	16 Eyl 2022
36İzleyin	CVE-2021-39139İstismar yok	XStream is vulnerable to an Arbitrary Code Execution attackxstream · xstream · CWE-434 RCE Dosya yükleme	Yüksek8,8	—	%4,5	23 Ağu 2021
35İzleyin	CVE-2021-39149İstismar yok	XStream is vulnerable to an Arbitrary Code Execution attackxstream · xstream · CWE-434 RCE Dosya yükleme	Yüksek8,5	—	%4,7	23 Ağu 2021
35İzleyin	CVE-2021-39154İstismar yok	XStream is vulnerable to an Arbitrary Code Execution attackxstream · xstream · CWE-434 RCE Dosya yükleme	Yüksek8,5	—	%4,7	23 Ağu 2021
35İzleyin	CVE-2021-39151İstismar yok	XStream is vulnerable to an Arbitrary Code Execution attackxstream · xstream · CWE-434 RCE Dosya yükleme	Yüksek8,5	—	%4,7	23 Ağu 2021

CVE-2021-39144
93Hemen
XStream is vulnerable to a Remote Command Execution attack
YüksekCVSS 8,5KEVSilahlaştırılmışEPSS %98
- RCE
xstream · xstream23 Ağu 2021
CVE-2019-10173
68Bu hafta
It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw.
KritikCVSS 9,8İstismar yokEPSS %95
- pre-auth RCE
- Deserializasyon
xstream · xstream23 Tem 2019
CVE-2013-7285
64Bu hafta
Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run
KritikCVSS 9,8Kavram kanıtıEPSS %84
- pre-auth RCE
- Komut enjeksiyonu
xstream · xstream15 May 2019
CVE-2021-21346
62Bu hafta
XStream is vulnerable to an Arbitrary Code Execution attack
KritikCVSS 9,8İstismar yokEPSS %76
- pre-auth RCE
- Dosya yükleme
xstream · xstream22 Mar 2021
CVE-2021-21344
62Bu hafta
XStream is vulnerable to an Arbitrary Code Execution attack
KritikCVSS 9,8İstismar yokEPSS %76
- pre-auth RCE
- Dosya yükleme
xstream · xstream22 Mar 2021
CVE-2020-26217
61Bu hafta
Remote Code Execution in XStream
YüksekCVSS 8,8Kavram kanıtıEPSS %85
- RCE
- Komut enjeksiyonu
xstream · xstream16 Kas 2020
CVE-2021-21351
61Bu hafta
XStream is vulnerable to an Arbitrary Code Execution attack
KritikCVSS 9,1Kavram kanıtıEPSS %82
- RCE
- Dosya yükleme
xstream · xstream22 Mar 2021
CVE-2021-21345
61Bu hafta
XStream is vulnerable to a Remote Command Execution attack
KritikCVSS 9,9Kavram kanıtıEPSS %72
- RCE
xstream · xstream22 Mar 2021
CVE-2021-29505
58Planlayın
XStream is vulnerable to a Remote Command Execution attack
YüksekCVSS 8,8Kavram kanıtıEPSS %77
- RCE
xstream · xstream28 May 2021
CVE-2020-26258
55Planlayın
Server-Side Forgery Request can be activated unmarshalling with XStream
YüksekCVSS 7,7Kavram kanıtıEPSS %82
- SSRF
xstream · xstream15 Ara 2020
CVE-2021-21341
53Planlayın
XStream can cause a Denial of Service
YüksekCVSS 7,5Kavram kanıtıEPSS %78
- Kimlik doğrulamasız
- Hizmet dışı bırakma
xstream · xstream22 Mar 2021
CVE-2020-26259
52Planlayın
XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling
OrtaCVSS 6,8Kavram kanıtıEPSS %82
- pre-auth RCE
- Komut enjeksiyonu
xstream · xstream15 Ara 2020
CVE-2021-21342
51Planlayın
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or
KritikCVSS 9,1İstismar yokEPSS %50
- Kimlik doğrulamasız
- Deserializasyon
xstream · xstream22 Mar 2021
CVE-2021-21349
48Planlayın
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or
YüksekCVSS 8,6Kavram kanıtıEPSS %47
- Kimlik doğrulamasız
- Deserializasyon
xstream · xstream22 Mar 2021
CVE-2021-21343
44Planlayın
XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights
YüksekCVSS 7,5İstismar yokEPSS %47
- Kimlik doğrulamasız
- Yol geçişi
xstream · xstream22 Mar 2021
CVE-2021-21350
44Planlayın
XStream is vulnerable to an Arbitrary Code Execution attack
KritikCVSS 9,8İstismar yokEPSS %15
- pre-auth RCE
- Dosya yükleme
xstream · xstream22 Mar 2021
CVE-2021-21347
43Planlayın
XStream is vulnerable to an Arbitrary Code Execution attack
KritikCVSS 9,8İstismar yokEPSS %14
- pre-auth RCE
- Dosya yükleme
xstream · xstream22 Mar 2021
CVE-2021-39141
39İzleyin
XStream is vulnerable to an Arbitrary Code Execution attack
YüksekCVSS 8,5Kavram kanıtıEPSS %16
- RCE
- Dosya yükleme
xstream · xstream23 Ağu 2021
CVE-2021-39146
38İzleyin
XStream is vulnerable to an Arbitrary Code Execution attack
YüksekCVSS 8,5Kavram kanıtıEPSS %14
- RCE
- Dosya yükleme
xstream · xstream23 Ağu 2021
CVE-2021-39152
37İzleyin
A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling
YüksekCVSS 8,5Kavram kanıtıEPSS %11
- Deserializasyon
xstream · xstream23 Ağu 2021
CVE-2022-40152
36İzleyin
Stack Buffer Overflow in Woodstox
YüksekCVSS 7,5İstismar yokEPSS %20
- Kimlik doğrulamasız
- Bellek hatası
- Hizmet dışı bırakma
xstream · xstream16 Eyl 2022
CVE-2021-39139
36İzleyin
XStream is vulnerable to an Arbitrary Code Execution attack
YüksekCVSS 8,8İstismar yokEPSS %5
- RCE
- Dosya yükleme
xstream · xstream23 Ağu 2021
CVE-2021-39149
35İzleyin
XStream is vulnerable to an Arbitrary Code Execution attack
YüksekCVSS 8,5İstismar yokEPSS %5
- RCE
- Dosya yükleme
xstream · xstream23 Ağu 2021
CVE-2021-39154
35İzleyin
XStream is vulnerable to an Arbitrary Code Execution attack
YüksekCVSS 8,5İstismar yokEPSS %5
- RCE
- Dosya yükleme
xstream · xstream23 Ağu 2021
CVE-2021-39151
35İzleyin
XStream is vulnerable to an Arbitrary Code Execution attack
YüksekCVSS 8,5İstismar yokEPSS %5
- RCE
- Dosya yükleme
xstream · xstream23 Ağu 2021