Количество 7
Количество 7
BDU:2022-00725
Уязвимость библиотеки логирования logback, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольный код
CVE-2021-42550
In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.
CVE-2021-42550
In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.
CVE-2021-42550
In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.
CVE-2021-42550
In logback version 1.2.7 and prior versions, an attacker with the requ ...
SUSE-SU-2023:2097-1
Security update for maven and recommended update for antlr3, minlog, sbt, xmvn
GHSA-668q-qrv7-99fm
Deserialization of Untrusted Data in logback
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-00725 Уязвимость библиотеки логирования logback, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольный код | CVSS3: 6.6 | 4% Низкий | больше 4 лет назад |
 | CVE-2021-42550 In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers. | CVSS3: 6.6 | 4% Низкий | больше 4 лет назад |
 | CVE-2021-42550 In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers. | CVSS3: 6.6 | 4% Низкий | больше 4 лет назад |
 | CVE-2021-42550 In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers. | CVSS3: 6.6 | 4% Низкий | больше 4 лет назад |
| CVE-2021-42550 In logback version 1.2.7 and prior versions, an attacker with the requ ... | CVSS3: 6.6 | 4% Низкий | больше 4 лет назад |
 | SUSE-SU-2023:2097-1 Security update for maven and recommended update for antlr3, minlog, sbt, xmvn | 4% Низкий | больше 3 лет назад | |
| GHSA-668q-qrv7-99fm Deserialization of Untrusted Data in logback | CVSS3: 6.6 | 4% Низкий | больше 4 лет назад |
Уязвимостей на страницу