X-Stream / Xstream
38 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-47072 | XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream | HIGH | 7.7 | Nov 7, 2024 |
| CVE-2022-41966 | XStream Denial of Service via stack overflow | HIGH | 8.2 | Dec 27, 2022 |
| CVE-2022-40152 | Stack Buffer Overflow in Woodstox | HIGH | 7.5 | Sep 16, 2022 |
| CVE-2022-40151 | Stack Buffer Overflow in xstream | HIGH | 7.5 | Sep 16, 2022 |
| CVE-2021-43859 | Denial of Service by injecting highly recursive collections or maps in XStream | HIGH | 7.5 | Feb 1, 2022 |
| CVE-2021-39150 | A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling | HIGH | 8.5 | Aug 23, 2021 |
| CVE-2021-39152 | A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling | HIGH | 8.5 | Aug 23, 2021 |
| CVE-2021-39140 | XStream can cause a Denial of Service | MEDIUM | 6.5 | Aug 23, 2021 |
| CVE-2021-39149 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH | 8.5 | Aug 23, 2021 |
| CVE-2021-39148 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH | 8.5 | Aug 23, 2021 |
| CVE-2021-39147 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH | 8.5 | Aug 23, 2021 |
| CVE-2021-39146 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH | 8.5 | Aug 23, 2021 |
| CVE-2021-39145 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH | 8.5 | Aug 23, 2021 |
| CVE-2021-39141 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH | 8.5 | Aug 23, 2021 |
| CVE-2021-39153 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH | 8.5 | Aug 23, 2021 |
| CVE-2021-39151 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH | 8.5 | Aug 23, 2021 |
| CVE-2021-39139 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH | 8.8 | Aug 23, 2021 |
| CVE-2021-39154 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH | 8.5 | Aug 23, 2021 |
| CVE-2021-39144 KEV | XStream is vulnerable to a Remote Command Execution attack | HIGH | 8.5 | Aug 23, 2021 |
| CVE-2021-29505 | XStream is vulnerable to a Remote Command Execution attack | HIGH | 8.8 | May 28, 2021 |
| CVE-2021-21348 | XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) | HIGH | 7.5 | Mar 22, 2021 |
| CVE-2021-21349 | A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or… | HIGH | 8.6 | Mar 22, 2021 |
| CVE-2021-21350 | XStream is vulnerable to an Arbitrary Code Execution attack | CRITICAL | 9.8 | Mar 22, 2021 |
| CVE-2021-21351 | XStream is vulnerable to an Arbitrary Code Execution attack | CRITICAL | 9.1 | Mar 22, 2021 |
| CVE-2021-21341 | XStream can cause a Denial of Service | HIGH | 7.5 | Mar 22, 2021 |
Showing 1 to 25 of 38 CVEs