Lucene search
+L

137 matches found

UbuntuCve
UbuntuCve
added 2022/01/18 4:15 p.m.103 views

CVE-2022-23307

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...

9CVSS6.9AI score0.52458EPSS
SaveExploits0References6
Prion
Prion
added 2022/01/18 4:15 p.m.47 views

Deserialization of untrusted data

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...

9CVSS9AI score0.52458EPSS
SaveExploits0References4Affected Software26
OSV
OSV
added 2022/01/18 4:15 p.m.7 views

UBUNTU-CVE-2022-23307

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...

8.8CVSS6.9AI score0.52458EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2022/01/18 3:25 p.m.6 views

CVE-2022-23307 A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...

7AI score0.52458EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/01/18 3:25 p.m.35 views

CVE-2022-23307 A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...

9.2AI score0.52458EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2022/01/18 3:25 p.m.50 views

CVE-2022-23307

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...

9CVSS7.3AI score0.52458EPSS
SaveExploits0
CVE
CVE
added 2022/01/18 3:25 p.m.823 views

CVE-2022-23307

CVE-2022-23307 concerns a deserialization vulnerability in the Chainsaw component of Apache Log4j 1.x (Chainsaw bundled with Log4j 1.2.x). The root cause is unsafe deserialization of untrusted data via Chainsaw, allowing potential code execution. Multiple Atlassian products initially bundled Chai...

9CVSS9.2AI score0.52458EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2022/01/18 3:25 p.m.34 views

CVE-2022-23307 A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...

8.8CVSS6.9AI score0.52458EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/01/18 12:0 a.m.6 views

Apache Log4j 代码问题漏洞

Apache Log4j is a Java-based open source logging tool from the Apache Foundation. Apache log4j Chainsaw is vulnerable to deserialized code execution. The vulnerability stems from insufficient cleanup of user-supplied data in JDBCAppender in a non-default configuration with JDBCAppender enabled. A...

9CVSS6.5AI score0.52458EPSS
SaveExploits0References41
OpenVAS
OpenVAS
added 2022/01/18 12:0 a.m.47 views

Apache Log4j 1.x Multiple Vulnerabilities (Linux/Unix, Jan 2022) - Version Check

Apache Log4j is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:log4j"; ifdescription...

9.8CVSS9AI score0.66537EPSS
SaveExploits1References3
NVD
NVD
added 2021/06/16 8:15 a.m.30 views

CVE-2020-9493

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution...

9.8CVSS0.04612EPSS
SaveExploits0References4
OSV
OSV
added 2021/06/16 8:15 a.m.38 views

CVE-2020-9493

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution...

9.8CVSS6.9AI score
SaveExploits0References4
Prion
Prion
added 2021/06/16 8:15 a.m.34 views

Deserialization of untrusted data

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution...

6.8CVSS9.1AI score0.04612EPSS
SaveExploits0References4Affected Software3
Cvelist
Cvelist
added 2021/06/16 7:30 a.m.43 views

CVE-2020-9493 Java deserialization in Chainsaw

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution...

9.3AI score0.04612EPSS
SaveExploits0References4
CVE
CVE
added 2021/06/16 7:30 a.m.263 views

CVE-2020-9493

CVE-2020-9493 is a deserialization flaw in Apache Chainsaw, a component historically bundled with Log4j 1.2.x. The vulnerability allows remote code execution via improper deserialization, affecting Chainsaw before version 2.1.0. The connected advisories confirm Chainsaw as the vulnerable componen...

9.8CVSS9.2AI score0.04612EPSS
SaveExploits0References4Affected Software2
CNNVD
CNNVD
added 2021/06/16 12:0 a.m.2 views

Apache Chainsaw 代码问题漏洞

Apache Chainsaw is a Log4j companion application. A security vulnerability exists in Apache Chainsaw versions prior to 2.1.0 that stems from a deserialization flaw that could lead to malicious code execution...

9.8CVSS8.2AI score0.04612EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/06/16 12:0 a.m.11 views

PT-2021-6080

Name of the Vulnerable Software and Affected Versions Apache Chainsaw versions prior to 2.1.0 Description The issue is related to a deserialization flaw in the software, which could allow a remote attacker to execute arbitrary code. Recommendations For Apache Chainsaw versions prior to 2.1.0,...

9.8CVSS7.3AI score0.04612EPSS
SaveExploits0References14
Rows per page
Query Builder