Lucene search
K

375 matches found

Tenable Nessus
Tenable Nessus
added 2021/12/17 12:0 a.m.110 views

Apache Log4Shell RCE detection via callback correlation (Direct Check IMAP)

Binary data apachelog4shellimap.nbin...

10CVSS7.3AI score0.94358EPSS
Exploits341References3
OpenVAS
OpenVAS
added 2021/12/17 12:0 a.m.32 views

Apache Log4j 2.0.x Multiple Vulnerabilities (Windows, Log4Shell) - Version Check

Apache Log4j is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:log4j"; ifdescription...

10CVSS7AI score0.94358EPSS
Exploits343References18
Hacker One
Hacker One
added 2021/12/16 6:32 p.m.482 views

U.S. Dept Of Defense: Log4Shell: RCE 0-day exploit on █████████

Hi team, log4 shell is recent 0-day exploit it's Java package vulnerable. ██████████ domain is vulnerable Impact RCE System Hosts █████████ Affected Products and Versions CVE Numbers CVE-2021-44228 Steps to Reproduce 1. Go to this url =...

9.3CVSS0.7AI score0.94358EPSS
Exploits341
GithubExploit
GithubExploit
added 2021/12/16 5:21 p.m.421 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

MyLog4Shell log4j RCE Exploitation Detection You can use th...

10CVSS9.2AI score0.94358EPSS
Exploits341
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/16 3:24 p.m.104 views

Security Bulletin: Vulnerability in Apache Log4j affects WebSphere Application Server (CVE-2021-44228)

Summary There is a vulnerability in the Apache Log4j open source library used by WebSphere Application Server. This affects the WebSphere Application Server Admin Console and the UDDI Registry Application. This vulnerability has been addressed. Vulnerability Details CVEID: CVE-2021-44228...

10CVSS0.2AI score0.94358EPSS
Exploits344Affected Software1
GithubExploit
GithubExploit
added 2021/12/16 2:31 p.m.405 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228Apache Log4j Remote Code Execution) Versions Af...

10CVSS9.6AI score0.94358EPSS
Exploits341
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/16 1:28 p.m.243 views

Security Bulletin: Vulnerability exists in Watson Explorer (CVE-2021-44228)

Summary Log4j is used by IBM Watson Explorer to log system events for diagnostics. This bulletin provides a remediation for the vulnerability, CVE-2021-44228 by upgrading Watson Explorer and thus addressing the exposure to the log4j vulnerability. Vulnerability Details CVEID: CVE-2021-44228...

10CVSS0.6AI score0.94358EPSS
Exploits341Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/16 8:53 a.m.42 views

Security Bulletin: Apache Log4j Affects IBM Sterling Connect:Direct File Agent (CVE-2021-44228)

Summary There is a vulnerability in Apache Log4j used by IBM Sterling Connect:Direct File Agent. IBM Sterling Connect:Direct File Agent has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code o...

10CVSS1.2AI score0.94358EPSS
Exploits341Affected Software1
GithubExploit
GithubExploit
added 2021/12/16 8:46 a.m.405 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228 Apache Log4j Remote Code Execution) all lo...

10CVSS9.6AI score0.94358EPSS
Exploits341
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/16 4:28 a.m.59 views

Security Bulletin: Vulnerability in Apache Log4j affects IBM Data Risk Manager (CVE-2021-44228)

Summary IBM Data Risk Manager IDRM 2.0.6.9 and earlier is impacted by Log4Shell CVE-2021-44228, through the use of Apache Log4j's JNDI logging feature. This vulnerability has been addressed in the updated version of IDRM 2.0.6.10. Please see remediation steps below to apply fix. All customers...

10CVSS1AI score0.94358EPSS
Exploits341Affected Software1
FreeBSD
FreeBSD
added 2021/12/16 12:0 a.m.115 views

OpenSearch -- Log4Shell

OpenSearch reports: CVE-2021-45105 for Log4j was issued after the release of OpenSearch 1.2.2. This CVE advises upgrading to Log4j 2.17.0. While there has been no observed reproduction of the issue described in CVE-2021-45105 in OpenSearch, we have released OpenSearch 1.2.3 which updates Log4j to...

5.9CVSS1.9AI score0.74016EPSS
Exploits20References1
Tenable Nessus
Tenable Nessus
added 2021/12/16 12:0 a.m.102 views

Apache Log4Shell RCE detection via callback correlation (Direct Check FTP)

Binary data log4jlog4shellftp.nbin...

10CVSS7.3AI score0.94358EPSS
Exploits341References3
ThreatPost
ThreatPost
added 2021/12/15 11:18 p.m.144 views

Relentless Log4j Attacks Include State Actors, Possible Worm

Call it a “logjam” of threats: Attackers including nation-state actors have already targeted half of all corporate global networks in security companies’ telemetry using at least 70 distinct malware families — and the fallout from the Log4j vulnerability is just beginning. Researchers manning...

10CVSS9.7AI score0.94358EPSS
Exploits341References15
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/15 9:16 p.m.29 views

Security Bulletin: IBM Planning Analytics 2.0: Apache log4j Vulnerability (CVE-2021-44228)

Summary Within IBM Planning Analytics 2.0, only the IBM Planning Analytics Workspace component of IBM Planning Analytics is affected by a security vulnerability. Apache Log4j is used by IBM Planning Analytics Workspace as part of its logging infrastructure. This bulletin addresses the exposure to...

10CVSS1AI score0.94358EPSS
Exploits341Affected Software1
GithubExploit
GithubExploit
added 2021/12/15 9:9 p.m.42 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell Honeypot Enhanced dockerized honeypot for CVE-2021...

10CVSS7AI score0.94358EPSS
Exploits341
Malwarebytes
Malwarebytes
added 2021/12/15 8:59 p.m.160 views

What SMBs can do to protect against Log4Shell attacks

As you may already know, the business, tech, and cybersecurity industries have been buzzing about Log4Shell CVE-2021-44228, aka Logjam, the latest software flaw in an earlier version of the Apache Log4j logging utility. As the name suggests, a logger is a piece of software that logs every event...

9.3CVSS10AI score0.94358EPSS
Exploits341
Rapid7 Blog
Rapid7 Blog
added 2021/12/15 7:44 p.m.1047 views

The Everyperson’s Guide to Log4Shell (CVE-2021-44228)

If you work in security, the chances are that you have spent the last several days urgently responding to the Log4Shell vulnerability CVE-2021-44228, investigating where you have instances of Log4j in your environment, and questioning your vendors about their response. You have likely already rea...

9.3CVSS0.3AI score0.94358EPSS
Exploits344
ThreatPost
ThreatPost
added 2021/12/15 7:31 p.m.118 views

SAP Kicks Log4Shell Vulnerability Out of 20 Apps

SAP has identified 32 apps that are affected by CVE-2021-44228 – the critical vulnerability in the Apache Log4j Java-based logging library that’s been under active attack since last week. As of yesterday, Patch Tuesday, the German software maker reported that it’s already patched 20 of those apps...

10CVSS10AI score0.94358EPSS
Exploits341References23
GithubExploit
GithubExploit
added 2021/12/15 7:21 p.m.26 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4j-CVE-2021-44228 scanner playbook Very simple Ansible pla...

10CVSS6.8AI score0.94358EPSS
Exploits341
Qualys Blog
Qualys Blog
added 2021/12/15 5:6 p.m.134 views

Is Your Web Application Exploitable By Log4Shell Vulnerability?

On December 09, 2021, a critical remote code execution vulnerability was identified in Apache Log4j2 after proof-of-concepts were leaked publicly, affecting Apache Log4j 2.x = 2.15.0-rc1. The vulnerability is being tracked as CVE-2021-44228 with CVSSv3 10 score and affects numerous applications...

9.3CVSS10AI score0.94358EPSS
Exploits348
Rows per page
Query Builder