Lucene search
+L

573 matches found

Tenable Nessus
Tenable Nessus
•added 2025/10/08 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2025-11226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacke...

7CVSS6.5AI score0.00194EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/10/07 7:08 a.m.•11 views

Security update for logback

This update for logback fixes the following issues: CVE-2025-11226: fixed the ACE vulnerability in conditional configuration file processing bsc1250715 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

5.3CVSS6.8AI score0.00194EPSS
SaveExploits0References4
OSV
OSV
•added 2025/10/07 7:08 a.m.•5 views

SUSE-SU-2025:03456-1 Security update for logback

This update for logback fixes the following issues: - CVE-2025-11226: fixed the ACE vulnerability in conditional configuration file processing bsc1250715...

7CVSS5.9AI score0.00194EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2021-2454

Malware in sbrugna...

8.5CVSS7AI score0.04439EPSS
SaveExploits1References19
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2019-0634

Malware in sbrugna...

7.5CVSS7.8AI score0.10564EPSS
SaveExploits0References54
SUSE CVE
SUSE CVE
•added 2025/10/05 2:57 a.m.•18 views

SUSE CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS7.2AI score0.009EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/10/05 2:57 a.m.•18 views

SUSE CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS7.2AI score0.00682EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
•added 2025/10/04 12:00 a.m.•11 views

logback-1.2.13-1.1 on GA media (moderate)

logback-1.2.13-1.1 on GA media Announcement ID: openSUSE-SU-2025:15597-1 Rating: moderate Cross-References: CVE-2023-6378 CVE-2023-6481 CVE-2025-11226 CVSS scores: CVE-2025-11226 SUSE : 5.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L Affected Products: openSUSE Tumbleweed An update that solves 3...

5.3CVSS7AI score0.009EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•9 views

EUVD-2023-3212

Malicious code in bioql PyPI...

7.5CVSS6.9AI score0.00682EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-27691

Malicious code in bioql PyPI...

4.9CVSS5.3AI score0.00555EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-3561

Malicious code in bioql PyPI...

2.4CVSS6.1AI score0.00226EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2024-3605

Malicious code in bioql PyPI...

5.9CVSS6.6AI score0.00458EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-3046

Malicious code in bioql PyPI...

7.5CVSS7AI score0.009EPSS
SaveExploits0References10
OSV
OSV
•added 2025/10/03 12:00 a.m.•4 views

OPENSUSE-SU-2025:15597-1 logback-1.2.13-1.1 on GA media

These are all security issues fixed in the logback-1.2.13-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS7.3AI score0.009EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/10/01 11:25 p.m.•11 views

SUSE CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

5.3CVSS9.3AI score0.00194EPSS
SaveExploits0References4
OSV
OSV
•added 2025/10/01 9:30 a.m.•37 views

GHSA-25QH-J22F-PWP8 QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processing

QOS.CH logback-core versions up to 1.5.18 contain an ACE vulnerability in conditional configuration file processing in Java applications. This vulnerability allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting a malicious environment...

5.9CVSS7.4AI score0.00194EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2025/10/01 9:30 a.m.•42 views

QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processing

QOS.CH logback-core versions up to 1.5.18 contain an ACE vulnerability in conditional configuration file processing in Java applications. This vulnerability allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting a malicious environment...

7CVSS7.7AI score0.00194EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2025/10/01 8:15 a.m.•13 views

CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS0.00194EPSS
SaveExploits0References2
OSV
OSV
•added 2025/10/01 8:15 a.m.•13 views

DEBIAN-CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS6.1AI score0.00194EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2025/10/01 8:15 a.m.•14 views

CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS6.3AI score0.00194EPSS
SaveExploits0References2
Rows per page
Query Builder