X-stream vulnerabilities
32 CVEs and advisories name X-stream as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-47072XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream
- CVE-2022-41966XStream Denial of Service via stack overflow
- CVE-2021-43859Denial of Service by injecting highly recursive collections or maps in XStream
- CVE-2021-39150A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling
- CVE-2021-39152A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling
- CVE-2021-39140XStream can cause a Denial of Service
- CVE-2021-39149XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39148XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39147XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39146XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39145XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39141XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39153XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39151XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39139XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39154XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-39144XStream is vulnerable to a Remote Command Execution attack
- CVE-2021-29505XStream is vulnerable to a Remote Command Execution attack
- CVE-2021-21348XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)
- CVE-2021-21349A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
- CVE-2021-21350XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-21351XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-21341XStream can cause a Denial of Service
- CVE-2021-21342A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
- CVE-2021-21343XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights
- CVE-2021-21344XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-21345XStream is vulnerable to a Remote Command Execution attack
- CVE-2021-21346XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2021-21347XStream is vulnerable to an Arbitrary Code Execution attack
- CVE-2020-26258Server-Side Forgery Request can be activated unmarshalling with XStream