Skip to content
OpenAdvisories

Archive

22 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /22 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-21349 Public exploit EPSS 47%

    A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the…

    x-stream xstream libxstream-java libxstream-java Debian Ubuntu Maven
  • High 7.5
    CVE-2021-21341 Public exploit EPSS 78%

    XStream can cause a Denial of Service

    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such…

    x-stream xstream libxstream-java libxstream-java Debian Ubuntu Maven
  • Medium 5.8
    CVE-2021-21345 Public exploit EPSS 72%

    XStream is vulnerable to a Remote Command Execution attack

    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed inp…

    x-stream xstream com.thoughtworks.xstream:xstream libxstream-java Debian Ubuntu Maven
  • Unscored —
    CVE-2021-27308 Public exploit

    A cross-site scripting (XSS) vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to i…

  • Unscored —
    CVE-2021-26295 Public exploit EPSS 98%

    RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI

    Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz.

    Apache Software Foundation Apache OFBiz