CLEANSTART-2026-SX30440 Apache Log4j's JsonTemplateLayout https://logging

Security vulnerability affects the sonarqube package. Apache Log4j's JsonTemplateLayout https://logging...

CLEANSTART-2026-BH90179 Apache Log4j Core's XmlLayout https://logging

Security vulnerability affects the sonarqube package. Apache Log4j Core's XmlLayout https://logging...

CLEANSTART-2026-DZ37385 Apache Log4j Core's Rfc5424Layout https://logging

Security vulnerability affects the sonarqube package. Apache Log4j Core's Rfc5424Layout https://logging...

CLEANSTART-2026-LD36349 Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1

Security vulnerability affects the sonarqube package. The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1...

CLEANSTART-2026-FS24569 Socket Appender in Apache Log4j Core versions 2

Security vulnerability affects the sonarqube package. The Socket Appender in Apache Log4j Core versions 2...

Log4Shell RCE (CVE-2021-44228)

Exploits CVE-2021-44228 Log4j JNDI lookup injection via HTTP headers and query parameters. Uses sleep-based confirmation then delivers the configured reverse CMD payload through a user-supplied LDAP callback URL. !/usr/bin/env python3 -- coding: utf-8 -- """Log4Shell JNDI injection RCE...

Astra Linux – Vulnerability in Apache Log4j1.2

CVE-2020-9493 identified a deserialization issue present in Apache Chainsaw. Prior to Chainsaw V2.0, Chainsaw was a component of Apache Log4j 1.2.x, and the same issue still exists there...

Security Bulletin: Multiple Security Vulnerabilities Addressed in IBM Tivoli Netcool Configuration Manager(ITNCM) Version 6.4.2 Fix Pack 25 (6.4.2.25).

Summary Multiple security vulnerabilities have been addressed in IBM Tivoli Netcool Configuration ManagerITNCM Version 6.4.2 Fix Pack 25 6.4.2.25. The vulnerabilities affect components including Apache Log4j, Eclipse OpenJ9, Java SE, Apache Ant, and SSH implementations. Vulnerability Details...

ROOT-APP-MAVEN-CVE-2021-4104 CVE-2021-4104 in log4j:log4j - Patched by Root

Root has patched CVE-2021-4104 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2023-26464 CVE-2023-26464 in log4j:log4j - Patched by Root

Root has patched CVE-2023-26464 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-17571 CVE-2019-17571 in log4j:log4j - Patched by Root

Root has patched CVE-2019-17571 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-23302 CVE-2022-23302 in log4j:log4j - Patched by Root

Root has patched CVE-2022-23302 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-23305 CVE-2022-23305 in log4j:log4j - Patched by Root

Root has patched CVE-2022-23305 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-23307 CVE-2022-23307 in log4j:log4j - Patched by Root

Root has patched CVE-2022-23307 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...

Apache Log4j2 - Remote Code Injection

Apache Log4j2 Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations. id: CVE-2021-45046 info: name: Apache Log4j2 - Remote Code Injection author: ImNightmaree severity: critical description: Apache Log4j2 Thread Context Lookup Pattern is...

ROOT-APP-MAVEN-CVE-2025-68161 CVE-2025-68161 in org.apache.logging.log4j:log4j-core - Patched by Root

Root has patched CVE-2025-68161 in the org.apache.logging.log4j:log4j-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-34480 CVE-2026-34480 in org.apache.logging.log4j:log4j-core - Patched by Root

Root has patched CVE-2026-34480 in the org.apache.logging.log4j:log4j-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-34478 CVE-2026-34478 in org.apache.logging.log4j:log4j-core - Patched by Root

Root has patched CVE-2026-34478 in the org.apache.logging.log4j:log4j-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-34479 CVE-2026-34479 in org.apache.logging.log4j:log4j-1.2-api - Patched by Root

Root has patched CVE-2026-34479 in the org.apache.logging.log4j:log4j-1.2-api package for Root:Maven. Multiple fixed versions available...

CLEANSTART-2026-KK56976 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON

CVE-2026-49844 affects multiple packages. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...