Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2696▼ 543 respecto a la semana anterior
Críticas / altas1264▼ 228 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)262▼ 241 respecto a la semana anterior
–

358 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaAlta (8.5)4.5%—XstreamFedoraproject FedoraDebian LinuxNetapp Snapmanager+923/8/202117/6/2026
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream, if using the version out of the box with Java runtime version 14 to 8 or…
AnalizadaAlta (8.5)4.7%—XstreamFedoraproject FedoraDebian LinuxNetapp Snapmanager+1123/8/202117/6/2026
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's…
AnalizadaAlta (8.5)4.7%—XstreamFedoraproject FedoraDebian LinuxNetapp Snapmanager+1123/8/202117/6/2026
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's…
AnalizadaAlta (8.5)4.7%—XstreamFedoraproject FedoraDebian LinuxNetapp Snapmanager+1123/8/202117/6/2026
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's…
AnalizadaAlta (8.5)4.7%—XstreamFedoraproject FedoraDebian LinuxNetapp Snapmanager+1123/8/202117/6/2026
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's…
AnalizadaAlta (8.5)14%💥 ExploitXstreamFedoraproject FedoraDebian LinuxNetapp Snapmanager+1123/8/202117/6/2026
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's…
AnalizadaAlta (8.5)4.1%—XstreamDebian LinuxFedoraproject FedoraNetapp Snapmanager+1123/8/202117/6/2026
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's…
AnalizadaAlta (8.5)98%⚠ Explotación activa💥 ExploitXstreamDebian LinuxFedoraproject FedoraNetapp Snapmanager+1123/8/202117/6/2026
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's…
AnalizadaAlta (8.5)16%💥 ExploitXstreamDebian LinuxFedoraproject FedoraNetapp Snapmanager+1123/8/202117/6/2026
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's…
AnalizadaAlta (8.8)4.5%—XstreamDebian LinuxFedoraproject FedoraNetapp Snapmanager+1123/8/202117/6/2026
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. A user is only affected if using the version out of the box with JDK 1.7u21…
ModificadaAlta (7.5)1.6%—Hitachienergy Relion 670 FirmwareHitachienergy Relion 650 FirmwareHitachienergy Relion Sam600-io FirmwareHitachienergy Rtu500 Firmware+514/6/202117/6/2026
Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 (TEGO1), MSM, GMS600, PWC600 allows an attacker with access to the IEC 61850 network with knowledge of how to reproduce the attack, as well as…
ModificadaAlta (8.8)77%💥 ExploitXstreamDebian LinuxFedoraproject FedoraNetapp Snapmanager+1328/5/202117/6/2026
XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's…
ModificadaCrítica (9.8)3.2%—Dell Storage Monitoring AND ReportingDell Storage Resource Manager12/4/202117/6/2026
Dell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted Deserialization Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to arbitrary privileged code execution on the vulnerable application. The severity is Critical as this may…
AnalizadaCrítica (9.1)82%💥 ExploitNetapp Oncommand InsightApache ActivemqApache JmeterXstream+1222/3/20217/10/2026
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to…
AnalizadaCrítica (9.8)15%—Netapp Oncommand InsightApache ActivemqApache JmeterXstream+1222/3/20217/10/2026
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to execute arbitrary code only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security…
AnalizadaAlta (8.6)47%💥 PoCNetapp Oncommand InsightApache ActivemqApache JmeterXstream+1322/3/20217/10/2026
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream. No user is affected, who followed…
AnalizadaAlta (7.5)14%—Netapp Oncommand InsightApache ActivemqApache JmeterXstream+1222/3/20217/10/2026
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maximum CPU time and will never return. No user is affected, who followed the recommendation to setup XStream's security…
AnalizadaCrítica (9.8)14%—Netapp Oncommand InsightApache ActivemqApache JmeterXstream+1222/3/20217/10/2026
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation…
AnalizadaCrítica (9.8)76%—Netapp Oncommand InsightApache ActivemqApache JmeterXstream+1222/3/20217/10/2026
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation…
AnalizadaCrítica (9.9)72%💥 ExploitNetapp Oncommand InsightApache ActivemqApache JmeterXstream+1222/3/20217/10/2026
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the…
AnalizadaCrítica (9.8)76%—Netapp Oncommand InsightApache ActivemqApache JmeterXstream+1222/3/20217/10/2026
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation…
AnalizadaAlta (7.5)47%—Netapp Oncommand InsightApache ActivemqApache JmeterXstream+1122/3/20217/10/2026
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information.…
AnalizadaCrítica (9.1)50%—Netapp Oncommand InsightApache ActivemqApache JmeterXstream+1122/3/20217/10/2026
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information.…
AnalizadaAlta (7.5)78%💥 PoCNetapp Oncommand InsightApache ActivemqApache JmeterXstream+922/3/20217/10/2026
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by…
ModificadaMedia (5.3)1.1%—IBM Cloud PAK FOR Multicloud Management Monitoring9/3/202117/6/2026
IBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information in headers which could lead to further attacks against the system. IBM X-Force ID: 194513.