Lucene search
K

27 matches found

OSV
OSV
added 2026/05/19 9:3 a.m.3 views

ROOT-APP-MAVEN-CVE-2023-26464 CVE-2023-26464 in io.root.log4j:log4j - Patched by Root

Root has patched CVE-2023-26464 in the io.root.log4j:log4j package for Root:Maven. Multiple fixed versions available...

7.5CVSS5.8AI score0.00125EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/01/09 10:41 a.m.5 views

CVE-2022-26464

In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032699; Issue ID: ALPS07032699...

6.7CVSS7.2AI score0.00016EPSS
Exploits0References1
Wolfi
Wolfi
added 2026/01/07 1:51 a.m.3 views

CVE-2023-26464 vulnerabilities

Vulnerabilities for packages: druid...

7.5CVSS7AI score0.00125EPSS
Exploits0
Chainguard
Chainguard
added 2026/01/07 1:29 a.m.3 views

CVE-2023-26464 vulnerabilities

Vulnerabilities for packages: druid...

7.5CVSS7AI score0.00125EPSS
Exploits0
Circl
Circl
added 2025/09/06 4:33 a.m.2 views

CVE-2025-26464

creationtimestamp| type| source ---|---|--- 2025-09-06 04:33:06+00:00| seen| Telegram/Vo1mZ6KN0mahnbuL9ByapAZYQGoK5oTRC920P5QfwQRRE...

7.8CVSS4.8AI score0.00013EPSS
Exploits0
OSV
OSV
added 2025/09/04 7:15 p.m.0 views

CVE-2025-26464

In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/07 6:19 a.m.17 views

Security Bulletin: Vulnerability in Log4j affects IBM Cloud Pak for Data Systems 1.0 (CPDS 1.0) [CVE-2023-26464]

Summary Redhat provided Log4j is used by IBM Cloud Pak for Data System 1.0 . IBM Cloud Pak for Data System 1.0 has addressed the applicable CVE CVE-2023-26464 Vulnerability Details CVEID:CVE-2023-26464 DESCRIPTION: UNSUPPORTED WHEN ASSIGNED When using the Chainsaw or SocketAppender components wit...

7.5CVSS7.1AI score0.00125EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2023-26464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UNSUPPORTED WHEN ASSIGNED When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging...

7.5CVSS6.8AI score0.00125EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/11/27 12:0 a.m.18 views

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.11 Security update (Important) (RHSA-2024:10207)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10207 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release ...

10CVSS8.4AI score0.72202EPSS
Exploits22References35
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.25 views

RHEL 6 : log4j (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - log4j: Socket receiver deserialization vulnerability CVE-2017-5645 - UNSUPPORTED WHEN ASSIGNED When using...

9.8CVSS7.5AI score0.93917EPSS
Exploits2References2
Circl
Circl
added 2024/02/27 5:28 p.m.2 views

CVE-2024-26464

creationtimestamp| type| source ---|---|--- 2024-02-27 17:28:08+00:00| seen| https://t.me/ctinow/194644...

4AI score
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/02/27 4:15 p.m.13 views

CVE-2024-26464

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.8AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/10/06 12:0 a.m.61 views

RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.13 security update on RHEL 8 (Important) (RHSA-2023:5485)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5485 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

9.8CVSS6.8AI score0.06248EPSS
Exploits4References33
RedHat Linux
RedHat Linux
added 2023/10/05 8:23 p.m.55 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.13 security update on RHEL 7

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

9.8CVSS6.7AI score0.06248EPSS
Exploits4References25
RedHat Linux
RedHat Linux
added 2023/10/05 8:18 p.m.71 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.13 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS6.7AI score0.06248EPSS
Exploits4References25
IBM Security Bulletins
IBM Security Bulletins
added 2023/05/25 6:50 a.m.46 views

Security Bulletin: Vulnerability from log4j-1.2.16.jar affect IBM Operations Analytics - Log Analysis (CVE-2023-26464)

Summary log4j-1.2.16.jar is vulnerable and it is shipped in Log Analysis. The fix includes Apache Log4j core 2.17.1 Vulnerability Details CVEID:CVE-2023-26464 DESCRIPTION: Apache Log4j is vulnerable to a denial of service, caused by a flaw when using the Chainsaw or SocketAppender components. By...

7.5CVSS7.2AI score0.00125EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/05/02 10:11 p.m.29 views

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Apache Log4j

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Apache Log4j. Vulnerability Details CVEID:CVE-2023-26464 DESCRIPTION: Apache Log4j is vulnerable to a denial of service, caused by a flaw when using the Chainsaw or SocketAppender components. By...

7.5CVSS7.2AI score0.00125EPSS
Exploits0Affected Software1
F5 Networks
F5 Networks
added 2023/04/05 4:36 p.m.34 views

K000133409: Log4j vulnerability CVE-2023-26464

Security Advisory Description UNSUPPORTED WHEN ASSIGNED When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging entry involving a specially-crafted ie, deeply nested hashmap or hashtable depending on which logging...

7.5CVSS6.9AI score0.00125EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2023/03/30 7:13 a.m.145 views

CVE-2023-26464

A flaw was found in Chainsaw and SocketAppender components with Log4j 1.x on JRE, less than 1.7. This issue may allow an attacker to use a logging entry with a specially-crafted hashmap or hashtable, depending on which logging component is in use, to process and exhaust the available memory in th...

7.5CVSS7.1AI score0.00125EPSS
Exploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/23 6:3 p.m.57 views

Security Bulletin: TADDM is vulnerable to a denial of service vulnerability in Apache-Log4j (CVE-2023-26464)

Summary Apache-Log4j version 1 is used by IBM Tivoli Application Dependency Discovery Manager and is vulnerable to CVE-2023-26464. Vulnerability Details CVEID:CVE-2023-26464 DESCRIPTION: Apache Log4j is vulnerable to a denial of service, caused by a flaw when using the Chainsaw or SocketAppender...

7.5CVSS7.5AI score0.00125EPSS
Exploits0Affected Software1
Rows per page
Query Builder