Поиск уязвимостей
Количество 6
Количество 6
CVE-2013-7285
Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.
CVE-2013-7285
Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.
CVE-2013-7285
Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.
CVE-2013-7285
Xstream API versions up to 1.4.6 and version 1.4.10, if the security f ...
GHSA-f554-x222-wgf7
Command Injection in Xstream
ALT-PU-2016-3325
ALT-PU-2016-3325: package `xstream` update to version 1.4.8-alt0.1jpp
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2013-7285 Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON. | CVSS3: 9.8 | 84% Высокий | больше 7 лет назад |
 | CVE-2013-7285 Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON. | CVSS2: 6.8 | 84% Высокий | почти 13 лет назад |
 | CVE-2013-7285 Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON. | CVSS3: 9.8 | 84% Высокий | больше 7 лет назад |
| CVE-2013-7285 Xstream API versions up to 1.4.6 and version 1.4.10, if the security f ... | CVSS3: 9.8 | 84% Высокий | больше 7 лет назад |
| GHSA-f554-x222-wgf7 Command Injection in Xstream | CVSS3: 9.8 | 84% Высокий | больше 7 лет назад |
| ALT-PU-2016-3325 ALT-PU-2016-3325: package `xstream` update to version 1.4.8-alt0.1jpp | CVSS3: 9.8 | 84% Высокий | почти 11 лет назад |
Уязвимостей на страницу