EUVD-2002-0968

Malware in sbrugna...

Apache Log4j 输入验证错误漏洞

Apache Log4j is a Java-based open source logging tool from the Apache Foundation. An injection vulnerability exists in Apache Log4j2 versions 2.0-beta7 through 2.17.0, which stems from a lack of effective protection and filtering for JDBC Appender and JNDI in the software. An attacker who has the...

CVE-2002-0979

The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code...