Search CVE reports
21 – 30 of 37 results
CVE-2021-21350
Medium priorityXStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to execute arbitrary code only by manipulating the processed input...
1 affected packages
libxstream-java
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libxstream-java | Fixed | Fixed | Fixed | Fixed | Fixed |
CVE-2021-21349
Medium priorityXStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly...
1 affected packages
libxstream-java
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libxstream-java | Fixed | Fixed | Fixed | Fixed | Fixed |
CVE-2021-21348
Low priorityXStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maximum CPU time and will never...
1 affected packages
libxstream-java
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libxstream-java | Fixed | Fixed | Fixed | Fixed | Fixed |
CVE-2021-21347
Medium priorityXStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by...
1 affected packages
libxstream-java
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libxstream-java | Fixed | Fixed | Fixed | Fixed | Fixed |
CVE-2021-21346
Medium prioritySome fixes available 6 of 9
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by...
1 affected packages
libxstream-java
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libxstream-java | Not affected | Vulnerable | Fixed | Fixed | Fixed |
CVE-2021-21345
Medium priorityXStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by...
1 affected packages
libxstream-java
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libxstream-java | Fixed | Fixed | Fixed | Fixed | Fixed |
CVE-2021-21344
Medium priorityXStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by...
1 affected packages
libxstream-java
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libxstream-java | Fixed | Fixed | Fixed | Fixed | Fixed |
CVE-2021-21343
Medium priorityXStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly...
1 affected packages
libxstream-java
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libxstream-java | Fixed | Fixed | Fixed | Fixed | Fixed |
CVE-2021-21342
Medium priorityXStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly...
1 affected packages
libxstream-java
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libxstream-java | Fixed | Fixed | Fixed | Fixed | Fixed |
CVE-2021-21341
Medium priorityXStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type...
1 affected packages
libxstream-java
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libxstream-java | Fixed | Fixed | Fixed | Fixed | Fixed |