8849 matches found
Moderate: Red Hat Security Advisory: Openshift Logging security and bug update (5.2.4)
An update is now available for OpenShift Logging 5.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in th...
Moderate: Red Hat Security Advisory: Openshift Logging security and bug update (5.1.5)
An update is now available for OpenShift Logging 5.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in th...
ca.uhn.hapi.fhir.karaf:hapi-fhir (>=3.3.0 <=3.7.0), com.esri.geoevent.sdk:geoevent-sdk (>=10.7.1 <=10.8.1) +118 more potentially affected by CVE-2021-44228 +1 more via org.ops4j.pax.logging:pax-logging-log4j2 (>=1.10.0 <=1.10.7)
org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =1.10.0, =3.3.0, =10.7.1, =2.0.1, =1.2.0, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.61.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.24.01 and more Source cves: CVE-2021-44228, CVE-2021-45046 Source advisory: OSV:GHSA-7RJR-3Q55-VV33...
org.ops4j.pax.logging:pax-logging-log4j2-extra (=1.11.10), org.ops4j.pax.logging:pax-logging-sample-fragment-log4j2 (=1.11.10) +1 more potentially affected by CVE-2021-44228 +1 more via org.ops4j.pax.logging:pax-logging-log4j2 (=1.11.10)
org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =1.11.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.ops4j.pax.logging:pax-logging-log4j2 and may be impacted: - org.ops4j.pax.logging:pax-logging-log4j2-extra =1.11.10 -...
SUSE-SU-2021:4059-1 Security update for runc
This update for runc fixes the following issues: Update to runc v1.0.3. CVE-2021-43784: Fixed a potential vulnerability related to the internal usage of netlink, which is believed to not be exploitable with any released versions of runc bsc1193436 Fixed inability to start a container with...
Apache Log4j Code Issue Vulnerability
Apache Log4j is the United States Apache Apache Foundation of a Java-based open source logging tool . Apache Log4J has a code issue vulnerability that can be exploited by an attacker to design a data request to be sent to a server using the Apache Log4j tool, which triggers remote code execution...
Apache Log4Shell RCE detection via Raw Socket Logging (Direct Check)
Binary data apachelog4jjndildapgenericraw.nbin...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Nmap Log4Shell NSE script for discovery Apache Log4j RCE CVE-...
CVE-2021-39919
Removed by vendor...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-44228 Spring Boot Test Service This is a dirty hack s...
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
PoC exploit for CVE-2021-44228, a vulnerability in the Log4j Java library. The target product/service is Log4j, a Java logging library, and the vulnerability class/vector is a Remote Code Execution RCE vulnerability. The probable entry point is the "sendDetectionRequest" function in the...
Apache Log4j 代码问题漏洞
Apache Log4j is a Java-based open source logging tool from the Apache Foundation. Apache Log4j 1.2 is vulnerable to a code issue that could be exploited by attackers to run code via JMSApender deserialization...
PT-2021-22765 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 14.0 through 14.3.5 GitLab CE/EE versions 14.4 through 14.4.3 GitLab CE/EE versions 14.5 through 14.5.1 Description: The reset password token and new user email token are accidentally logged, which may lead to informatio...
The vulnerability of the mechanisms used by Cisco Webex Meetings Client software for web conference communications allows attackers to disclose protected information.
The vulnerability of the logging mechanisms in the Cisco Webex Meetings Client software arises from deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these mechanisms...
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
Published on: 2021 Dec 11, updated 2021 Dec 18. SUMMARY Microsoft continues our analysis of the remote code execution vulnerabilities related to Apache Log4j a logging tool used in many Java-based applications disclosed on 9 Dec 2021. Currently, Microsoft is not aware of any impact, outside of th...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4jHotPatch This is a tool which injects a Java agent into...
Extremely Critical Log4J Vulnerability Leaves Much of the Internet at Risk
The Apache Software Foundation has released fixes to contain an actively exploited zero-day vulnerability affecting the widely-used Apache Log4j Java-based logging library that could be weaponized to execute malicious code and allow a complete takeover of vulnerable systems. Tracked as...
Remote code injection in Log4j (through pax-logging-log4j2)
Impact Remote Code Execution. Patches Users of pax-logging 1.11.9 should update to 1.11.10. Users of pax-logging 2.0.10 should update to 2.0.11. Workarounds Set system property -Dlog4j2.formatMsgNoLookups=true References https://github.com/advisories/GHSA-jfh8-c2jp-5v3q...
GHSA-XXFH-X98P-J8FR Remote code injection in Log4j (through pax-logging-log4j2)
Impact Remote Code Execution. Patches Users of pax-logging 1.11.9 should update to 1.11.10. Users of pax-logging 2.0.10 should update to 2.0.11. Workarounds Set system property -Dlog4j2.formatMsgNoLookups=true References https://github.com/advisories/GHSA-jfh8-c2jp-5v3q...
