Lucene search
+L

33 matches found

OSV
OSV
added 2022/01/18 4:15 p.m.3 views

DEBIAN-CVE-2022-23307

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...

8.8CVSS7.3AI score0.54411EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/18 4:15 p.m.49 views

Deserialization of untrusted data

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...

9CVSS9AI score0.54411EPSS
SaveExploits0References4Affected Software26
UbuntuCve
UbuntuCve
added 2022/01/18 4:15 p.m.105 views

CVE-2022-23307

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...

9CVSS6.9AI score0.54411EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2022/01/18 3:25 p.m.50 views

CVE-2022-23307

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...

9CVSS7.3AI score0.54411EPSS
SaveExploits0
OSV
OSV
added 2022/01/18 3:25 p.m.34 views

CVE-2022-23307 A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...

8.8CVSS6.9AI score
SaveExploits0References6
CVE
CVE
added 2022/01/18 3:25 p.m.832 views

CVE-2022-23307

CVE-2022-23307 concerns a deserialization vulnerability in the Chainsaw component of Apache Log4j 1.x (Chainsaw bundled with Log4j 1.2.x). The root cause is unsafe deserialization of untrusted data via Chainsaw, allowing potential code execution. Multiple Atlassian products initially bundled Chai...

9CVSS9.2AI score0.54411EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2021/06/16 8:15 a.m.39 views

CVE-2020-9493

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution...

9.8CVSS6.9AI score
SaveExploits0References4
NVD
NVD
added 2021/06/16 8:15 a.m.30 views

CVE-2020-9493

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution...

9.8CVSS0.04591EPSS
SaveExploits0References4
Prion
Prion
added 2021/06/16 8:15 a.m.35 views

Deserialization of untrusted data

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution...

6.8CVSS9.1AI score0.04591EPSS
SaveExploits0References4Affected Software3
Cvelist
Cvelist
added 2021/06/16 7:30 a.m.46 views

CVE-2020-9493 Java deserialization in Chainsaw

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution...

9.3AI score0.04591EPSS
SaveExploits0References4
CVE
CVE
added 2021/06/16 7:30 a.m.265 views

CVE-2020-9493

CVE-2020-9493 is a deserialization flaw in Apache Chainsaw, a component historically bundled with Log4j 1.2.x. The vulnerability allows remote code execution via improper deserialization, affecting Chainsaw before version 2.1.0. The connected advisories confirm Chainsaw as the vulnerable componen...

9.8CVSS9.2AI score0.04591EPSS
SaveExploits0References4Affected Software2
Positive Technologies
Positive Technologies
added 2021/06/16 12:0 a.m.12 views

PT-2021-6080

Name of the Vulnerable Software and Affected Versions Apache Chainsaw versions prior to 2.1.0 Description The issue is related to a deserialization flaw in the software, which could allow a remote attacker to execute arbitrary code. Recommendations For Apache Chainsaw versions prior to 2.1.0,...

9.8CVSS7.3AI score0.04591EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2021/06/16 12:0 a.m.4 views

Apache Chainsaw 代码问题漏洞

Apache Chainsaw is a Log4j companion application. A security vulnerability exists in Apache Chainsaw versions prior to 2.1.0 that stems from a deserialization flaw that could lead to malicious code execution...

9.8CVSS8.2AI score0.04591EPSS
SaveExploits0References7
Rows per page
Query Builder