Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

395 matches found

GithubExploit
GithubExploit•added 2021/12/10 5:13 p.m.•672 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

This is an example of exploiting CVE-2021-44228https://gith...

10CVSS9.6AI score0.99999EPSS
SaveExploits386
osv_cve
osv_cve•added 2021/12/10 10:15 a.m.•52 views

CVE-2021-44228

Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message...

10CVSS10AI score
SaveExploits0References52
NVD
NVD•added 2021/12/10 10:15 a.m.•80 views

CVE-2021-44228

Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message...

10CVSS0.99999EPSS
SaveExploits386References52
Prion
Prion•added 2021/12/10 10:15 a.m.•49 views

Default configuration

Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message...

9.3CVSS9.7AI score0.99999EPSS
SaveExploits386References52Affected Software102
GithubExploit
GithubExploit•added 2021/12/10 6:16 a.m.•21 views

Log4j2Scan

Log4j2Scan This tool is only for learning, research and sel...

7.6AI score
SaveExploits0
GithubExploit
GithubExploit•added 2021/12/10 6:15 a.m.•647 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4J-RCE-Proof-Of-Concept CVE-2021-44228 This is a proof o...

10CVSS9.5AI score0.99999EPSS
SaveExploits386
vulnersOsv
vulnersOsv•added 2021/12/10 12:40 a.m.•4 views

com.esri.geoevent.sdk:geoevent-sdk (>=10.6.0, <=10.7.0), com.savoirtech.aetos:aetos (4.1.1.0) +80 more potentially affected by CVE-2021-44228 via org.ops4j.pax.logging:pax-logging-log4j2 (>=1.8.2, <=1.9.1)

org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =1.8.2, =10.6.0, =0.2.0, =7.3.0, =7.3.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.3.0 - de.mhus.app:mhus-web 7.2.0 - de.mhus.app:web-api 7.2.0 - de.mhus.app:web-core 7.2.0 - de.mhus.app:web-jetty 7.2.0 - de.mhus.app:web-util 7.2.0 and more...

10CVSS7.5AI score0.99999EPSS
SaveExploits386
vulnersOsv
vulnersOsv•added 2021/12/10 12:40 a.m.•3 views

com.esri.geoevent.sdk:geoevent-sdk (10.9.1), hu.blackbelt.osgi.filestore:features (>=1.2.1, <=1.3.0) +50 more potentially affected by CVE-2021-44228 via org.ops4j.pax.logging:pax-logging-log4j2 (>=2.0.0, <=2.0.10)

org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =2.0.0, =1.2.1, =1.2.1, =1.0.12, =1.0.12, =2.14.2, =1.2.5, =2.18.0, =3.11.1, =3.10.0, =4.3.0.rc1, =4.3.0.rc1, =4.3.3 - org.apache.karaf.features:enterprise-legacy 4.3.0.rc1 and more Source cves: CVE-2021-44228 Source advisory:...

10CVSS7.5AI score0.99999EPSS
SaveExploits386
vulnersOsv
vulnersOsv•added 2021/12/10 12:40 a.m.•2 views

ca.uhn.hapi.fhir.karaf:hapi-fhir (>=3.3.0, <=3.7.0), com.esri.geoevent.sdk:geoevent-sdk (>=10.7.1, <=10.8.1) +118 more potentially affected by CVE-2021-44228 via org.ops4j.pax.logging:pax-logging-log4j2 (>=1.10.0, <=1.10.7)

org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =1.10.0, =3.3.0, =10.7.1, =2.0.1, =1.2.0, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.611, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.24.01 and more Source cves: CVE-2021-44228 Source advisory: OSV:GHSA-JFH8-C2JP-5V3Q...

10CVSS7.5AI score0.99999EPSS
SaveExploits386
vulnersOsv
vulnersOsv•added 2021/12/10 12:40 a.m.•3 views

com.esri.geoevent.sdk:geoevent-sdk (10.9.1), hu.blackbelt.osgi.filestore:features (>=1.2.1, <=1.3.0) +50 more potentially affected by CVE-2021-44228 via org.ops4j.pax.logging:pax-logging-log4j2 (>=2.0.0, <=2.0.10)

org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =2.0.0, =1.2.1, =1.2.1, =1.0.12, =1.0.12, =2.14.2, =1.2.5, =2.18.0, =3.11.1, =3.10.0, =4.3.0.rc1, =4.3.0.rc1, =4.3.3 - org.apache.karaf.features:enterprise-legacy 4.3.0.rc1 and more Source cves: CVE-2021-44228 Source advisory:...

10CVSS7.5AI score0.99999EPSS
SaveExploits386
vulnersOsv
vulnersOsv•added 2021/12/10 12:40 a.m.•2 views

com.esri.geoevent.sdk:geoevent-sdk (>=10.6.0, <=10.7.0), com.savoirtech.aetos:aetos (4.1.1.0) +80 more potentially affected by CVE-2021-44228 via org.ops4j.pax.logging:pax-logging-log4j2 (>=1.8.2, <=1.9.1)

org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =1.8.2, =10.6.0, =0.2.0, =7.3.0, =7.3.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.3.0 - de.mhus.app:mhus-web 7.2.0 - de.mhus.app:web-api 7.2.0 - de.mhus.app:web-core 7.2.0 - de.mhus.app:web-jetty 7.2.0 - de.mhus.app:web-util 7.2.0 and more...

10CVSS7.5AI score0.99999EPSS
SaveExploits386
vulnersOsv
vulnersOsv•added 2021/12/10 12:40 a.m.•3 views

com.esri.geoevent.sdk:geoevent-sdk (10.9.0), com.influxdb:influxdb-karaf (>=2.2.0, <=5.0.0) +101 more potentially affected by CVE-2021-44228 via org.ops4j.pax.logging:pax-logging-log4j2 (>=1.11.3, <=1.11.9)

org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =1.11.3, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =5.0.0 - de.mhus.app.reactive:reactive-dev 7.9.0 - de.mhus.app.reactive:reactive-karaf 7.9.0 - de.mhus.app.vault:vault-api 7.7.0 - de.mhus.app.vault:vault-core 7.7.0 - de.mhus.app.vault:vault-manager...

10CVSS7.5AI score0.99999EPSS
SaveExploits386
vulnersOsv
vulnersOsv•added 2021/12/10 12:40 a.m.•3 views

ca.uhn.hapi.fhir.karaf:hapi-fhir (>=3.3.0, <=3.7.0), com.esri.geoevent.sdk:geoevent-sdk (>=10.7.1, <=10.8.1) +118 more potentially affected by CVE-2021-44228 via org.ops4j.pax.logging:pax-logging-log4j2 (>=1.10.0, <=1.10.7)

org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =1.10.0, =3.3.0, =10.7.1, =2.0.1, =1.2.0, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.611, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.24.01 and more Source cves: CVE-2021-44228 Source advisory: GHSA-JFH8-C2JP-5V3Q...

10CVSS7.5AI score0.99999EPSS
SaveExploits386
vulnersOsv
vulnersOsv•added 2021/12/10 12:40 a.m.•3 views

com.esri.geoevent.sdk:geoevent-sdk (10.9.0), com.influxdb:influxdb-karaf (>=2.2.0, <=5.0.0) +101 more potentially affected by CVE-2021-44228 via org.ops4j.pax.logging:pax-logging-log4j2 (>=1.11.3, <=1.11.9)

org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =1.11.3, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =5.0.0 - de.mhus.app.reactive:reactive-dev 7.9.0 - de.mhus.app.reactive:reactive-karaf 7.9.0 - de.mhus.app.vault:vault-api 7.7.0 - de.mhus.app.vault:vault-core 7.7.0 - de.mhus.app.vault:vault-manager...

10CVSS7.5AI score0.99999EPSS
SaveExploits386
CNVD
CNVD•added 2021/12/10 12:00 a.m.•18 views

Apache Log4j2 suffers from a remote code execution vulnerability

Apache Log4j is a Java-based logging component . Apache Log4j2 is an upgraded version of Log4j , through the rewrite of Log4j introduced a rich feature set . The logging component is widely used in business systems development , to record program input and output log information. Apache Log4j2...

8.1AI score
SaveExploits0
CNVD
CNVD•added 2021/12/10 12:00 a.m.•32 views

Apache Log4j2 Remote Code Execution Vulnerability

Apache Log4j2 is a Java logging framework. Apache Log4j2 remote code execution vulnerability, due to the existence of recursive parsing of certain Apache Log4j2 features, an attacker can use the vulnerability to directly construct malicious requests and trigger remote code execution...

5.9AI score
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog•added 2021/12/10 12:00 a.m.•63 views

Apache Log4j2 Remote Code Execution Vulnerability

Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution...

10CVSS4.1AI score0.99999EPSS
SaveIn wildExploits386
CVE
CVE•added 2021/12/10 12:00 a.m.•8063 views

CVE-2021-44228

CVE-2021-44228 (Log4Shell) affects Apache Log4j2 2.0-beta9 through 2.15.0 (excluding some security releases) and is specific to log4j-core. The vulnerability arises from JNDI features used in configuration, log messages, and parameters, which can be exploited when an attacker can control log mess...

10CVSS7.7AI score0.99999EPSS
SaveIn wildExploits386References52Affected Software1
Cvelist
Cvelist•added 2021/12/10 12:00 a.m.•1903 views

CVE-2021-44228 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message...

9.1AI score0.99999EPSS
SaveExploits386References51
Debian CVE
Debian CVE•added 2021/12/10 12:00 a.m.•209 views

CVE-2021-44228

Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message...

10CVSS7.9AI score0.99999EPSS
SaveExploits386
Rows per page
Query Builder