Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

xstream Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2022-41966`XStream Denial of Service via stack overflow	Exploitation statusPublic exploit	FixYes	Affected productxstream	Published12/27/2022	SeverityHigh
`CVE-2022-40152`Stack Buffer Overflow in Woodstox	Exploitation statusPublic exploit	FixYes	Affected productWoodstox	Published09/16/2022	SeverityMedium
`CVE-2022-40151`Stack Buffer Overflow in xstream	Exploitation statusPublic exploit	FixNot confirmed	Affected productxstream	Published09/16/2022	SeverityMedium
`CVE-2021-43859`Denial of Service by injecting highly recursive collections or maps in XStream	Exploitation statusPublic exploit	FixNot confirmed	Affected productxstream	Published02/01/2022	SeverityHigh
`CVE-2021-39150`A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityHigh
`CVE-2021-39152`A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityHigh
`CVE-2021-39140`XStream can cause a Denial of Service	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityMedium
`CVE-2021-39149`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityHigh
`CVE-2021-39148`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityHigh
`CVE-2021-39147`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityHigh
`CVE-2021-39146`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityHigh
`CVE-2021-39145`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityHigh
`CVE-2021-39141`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityHigh
`CVE-2021-39153`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityHigh
`CVE-2021-39151`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityHigh
`CVE-2021-39139`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityHigh
`CVE-2021-39154`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityHigh
`CVE-2021-39144`XStream is vulnerable to a Remote Command Execution attack	Exploitation statusKEV	FixNot confirmed	Affected productxstream	Published08/23/2021	SeverityHigh
`CVE-2021-29505`XStream is vulnerable to a Remote Command Execution attack	Exploitation statusNot confirmed	FixYes	Affected productxstream	Published05/28/2021	SeverityHigh
`CVE-2021-21348`XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published03/22/2021	SeverityMedium
`CVE-2021-21349`A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published03/22/2021	SeverityMedium
`CVE-2021-21350`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published03/22/2021	SeverityMedium
`CVE-2021-21351`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published03/22/2021	SeverityMedium
`CVE-2021-21341`XStream can cause a Denial of Service	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published03/22/2021	SeverityHigh
`CVE-2021-21342`A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published03/22/2021	SeverityMedium
`CVE-2021-21343`XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published03/22/2021	SeverityMedium
`CVE-2021-21344`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published03/22/2021	SeverityMedium
`CVE-2021-21345`XStream is vulnerable to a Remote Command Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published03/22/2021	SeverityMedium
`CVE-2021-21346`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published03/22/2021	SeverityMedium
`CVE-2021-21347`XStream is vulnerable to an Arbitrary Code Execution attack	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published03/22/2021	SeverityMedium
`CVE-2020-26258`Server-Side Forgery Request can be activated unmarshalling with XStream	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published12/16/2020	SeverityMedium
`CVE-2020-26259`XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published12/16/2020	SeverityMedium
`CVE-2020-26217`Remote Code Execution in XStream	Exploitation statusNot confirmed	FixYes	Affected productxstream	Published11/16/2020	SeverityHigh
`CVE-2019-10173`CVE-2019-10173	Exploitation statusNot confirmed	FixNot confirmed	Affected productxstream	Published07/23/2019	SeverityHigh
`CVE-2013-7285`CVE-2013-7285	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published05/15/2019	SeverityUnknown
`CVE-2017-7957`CVE-2017-7957	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published04/29/2017	SeverityUnknown
`CVE-2016-3674`CVE-2016-3674	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published05/17/2016	SeverityUnknown

37 / 37 Results

All vulnerabilities loaded

Security vulnerabilities from xstream

xstream

Verify to analyze this security profile

Filters

Run an in-depth assessment with complete web risk management

Popular xstream products

xstream

Woodstox