High
CVE-2024-47072
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 37
Reset filters
High
CVE-2022-40151
XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflow
High
CVE-2022-41966
XStream can cause Denial of Service via stack overflow
High
CVE-2021-43859
Denial of Service by injecting highly recursive collections or maps in XStream
High
CVE-2021-39139
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-39140
XStream can cause a Denial of Service
High
CVE-2021-39141
XStream is vulnerable to an Arbitrary Code Execution attack
High
Exploited in attacks
CVE-2021-39144
XStream is vulnerable to a Remote Command Execution attack
High
CVE-2021-39145
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39146
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39147
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39148
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39149
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39150
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
High
CVE-2021-39151
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39152
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
High
CVE-2021-39153
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-39154
XStream is vulnerable to an Arbitrary Code Execution attack
High
CVE-2021-29505
XStream is vulnerable to a Remote Command Execution attack
Medium
CVE-2021-21351
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-21350
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-21349
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Medium
CVE-2021-21348
XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)
Medium
CVE-2021-21347
XStream is vulnerable to an Arbitrary Code Execution attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.