CVE-2021-20270
- EPSS 2.76%
- Veröffentlicht 23.03.2021 17:15:13
- Zuletzt bearbeitet 21.11.2024 05:46:15
An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.
CVE-2021-21347
- EPSS 14.3%
- Veröffentlicht 23.03.2021 00:15:13
- Zuletzt bearbeitet 07.10.2026 19:17:24
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processe...
CVE-2021-21348
- EPSS 13.83%
- Veröffentlicht 23.03.2021 00:15:13
- Zuletzt bearbeitet 07.10.2026 19:17:24
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maximum CPU time and will never return. No user is aff...
CVE-2021-21349
- EPSS 46.83%
- Veröffentlicht 23.03.2021 00:15:13
- Zuletzt bearbeitet 07.10.2026 19:17:24
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly available only by manipul...
CVE-2021-21350
- EPSS 15.23%
- Veröffentlicht 23.03.2021 00:15:13
- Zuletzt bearbeitet 07.10.2026 19:17:24
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to execute arbitrary code only by manipulating the processed input stream. No user is a...
CVE-2021-21351
- EPSS 82.14%
- Veröffentlicht 23.03.2021 00:15:13
- Zuletzt bearbeitet 07.10.2026 19:17:25
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed inpu...
CVE-2021-21341
- EPSS 77.8%
- Veröffentlicht 23.03.2021 00:15:12
- Zuletzt bearbeitet 07.10.2026 19:17:19
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel executio...
CVE-2021-21342
- EPSS 49.99%
- Veröffentlicht 23.03.2021 00:15:12
- Zuletzt bearbeitet 07.10.2026 19:17:20
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStr...
CVE-2021-21343
- EPSS 46.67%
- Veröffentlicht 23.03.2021 00:15:12
- Zuletzt bearbeitet 07.10.2026 19:17:22
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStr...
CVE-2021-21344
- EPSS 75.98%
- Veröffentlicht 23.03.2021 00:15:12
- Zuletzt bearbeitet 07.10.2026 19:17:23
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processe...