Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2022-04-01	CVE-2022-22965	Code Injection vulnerability in multiple products A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. network low complexity vmware cisco oracle siemens veritas CWE-94 critical	9.8
2021-12-17	CVE-2021-23450	All versions of package dojo are vulnerable to Prototype Pollution via the setObject function. network low complexity linuxfoundation oracle debian critical	9.8
2021-12-08	CVE-2021-43527	Out-of-bounds Write vulnerability in multiple products NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. network low complexity mozilla netapp oracle starwindsoftware CWE-787 critical	9.8
2021-03-23	CVE-2021-21342	XStream is a Java library to serialize objects to XML and back again. network low complexity xstream-project debian fedoraproject oracle critical	9.1
2021-03-23	CVE-2021-21344	XStream is a Java library to serialize objects to XML and back again. network low complexity xstream-project debian fedoraproject oracle critical	9.8
2021-03-23	CVE-2021-21345	OS Command Injection vulnerability in multiple products XStream is a Java library to serialize objects to XML and back again. network low complexity xstream-project debian fedoraproject oracle CWE-78 critical	9.9
2021-03-23	CVE-2021-21346	XStream is a Java library to serialize objects to XML and back again. network low complexity xstream-project debian fedoraproject oracle critical	9.8
2021-03-23	CVE-2021-21347	XStream is a Java library to serialize objects to XML and back again. network low complexity xstream-project debian fedoraproject oracle critical	9.8
2021-03-23	CVE-2021-21350	XStream is a Java library to serialize objects to XML and back again. network low complexity xstream-project debian fedoraproject oracle critical	9.8
2021-03-23	CVE-2021-21351	XStream is a Java library to serialize objects to XML and back again. network low complexity xstream-project debian fedoraproject oracle critical	9.1