Количество 45
Количество 45
CVE-2022-23302
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization ...
GHSA-w9p3-5cr8-m3jj
Deserialization of Untrusted Data in Log4j 1.x
BDU:2022-00526
Уязвимость реализации класса JMSSink библиотеки журналирования Java-программ Log4j, позволяющая нарушителю выполнить произвольный код
CVE-2022-23307
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
CVE-2022-23307
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
CVE-2022-23307
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
CVE-2022-23307
CVE-2020-9493 identified a deserialization issue that was present in A ...
CVE-2021-4104
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
CVE-2021-4104
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
CVE-2021-4104
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
CVE-2021-4104
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted ...
GHSA-f7vh-qwp3-x37m
Deserialization of Untrusted Data in Apache Log4j
BDU:2022-01069
Уязвимость библиотеки журналирования Java-программ Log4j, связанная с восстановлением в памяти недостоверных данных, позволяющая нарушителю выполнить произвольный код
openSUSE-SU-2021:4112-1
Security update for log4j12
openSUSE-SU-2021:4111-1
Security update for log4j
openSUSE-SU-2021:1631-1
Security update for kafka
openSUSE-SU-2021:1612-1
Security update for log4j12
SUSE-SU-2021:4115-1
Security update for log4j
SUSE-SU-2021:4112-1
Security update for log4j12
SUSE-SU-2021:4111-1
Security update for log4j
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2022-23302 JMSSink in all versions of Log4j 1.x is vulnerable to deserialization ... | CVSS3: 8.8 | 0% Низкий | больше 3 лет назад |
| GHSA-w9p3-5cr8-m3jj Deserialization of Untrusted Data in Log4j 1.x | CVSS3: 8.8 | 0% Низкий | больше 3 лет назад |
 | BDU:2022-00526 Уязвимость реализации класса JMSSink библиотеки журналирования Java-программ Log4j, позволяющая нарушителю выполнить произвольный код | CVSS3: 6.6 | 0% Низкий | больше 3 лет назад |
 | CVE-2022-23307 CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists. | CVSS3: 8.8 | 1% Низкий | больше 3 лет назад |
 | CVE-2022-23307 CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists. | CVSS3: 8.8 | 1% Низкий | больше 3 лет назад |
 | CVE-2022-23307 CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists. | CVSS3: 8.8 | 1% Низкий | больше 3 лет назад |
| CVE-2022-23307 CVE-2020-9493 identified a deserialization issue that was present in A ... | CVSS3: 8.8 | 1% Низкий | больше 3 лет назад |
| CVE-2021-4104 JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions. | CVSS3: 7.5 | 73% Высокий | больше 3 лет назад |
| CVE-2021-4104 JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions. | CVSS3: 7.5 | 73% Высокий | больше 3 лет назад |
| CVE-2021-4104 JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions. | CVSS3: 7.5 | 73% Высокий | больше 3 лет назад |
| CVE-2021-4104 JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted ... | CVSS3: 7.5 | 73% Высокий | больше 3 лет назад |
| GHSA-f7vh-qwp3-x37m Deserialization of Untrusted Data in Apache Log4j | CVSS3: 9.8 | 1% Низкий | больше 3 лет назад |
| BDU:2022-01069 Уязвимость библиотеки журналирования Java-программ Log4j, связанная с восстановлением в памяти недостоверных данных, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 1% Низкий | больше 3 лет назад |
 | openSUSE-SU-2021:4112-1 Security update for log4j12 | 73% Высокий | больше 3 лет назад | |
| openSUSE-SU-2021:4111-1 Security update for log4j | 73% Высокий | больше 3 лет назад | |
| openSUSE-SU-2021:1631-1 Security update for kafka | 73% Высокий | больше 3 лет назад | |
| openSUSE-SU-2021:1612-1 Security update for log4j12 | 73% Высокий | больше 3 лет назад | |
| SUSE-SU-2021:4115-1 Security update for log4j | 73% Высокий | больше 3 лет назад | |
| SUSE-SU-2021:4112-1 Security update for log4j12 | 73% Высокий | больше 3 лет назад | |
| SUSE-SU-2021:4111-1 Security update for log4j | 73% Высокий | больше 3 лет назад |
Уязвимостей на страницу