10 matches found
EUVD-2026-84526
Aureus ERP before 1.5.0 fails to scope message lookups to the current record in ChatterPanel, allowing authenticated users to access arbitrary messages. Attackers can submit sequential message IDs to read, edit, delete, or pin messages from other departments or companies, and enumerate all notes ...
Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228
Log4JExploitation-VulnerabiliyCVE-2021-44228. введение Обнаружена уязвимость удалённого выполнения кода, связанная с библиотекой ведения журналов Java Log4j. CVE-2021-44228 Эта уязвимость вызвала переполох в мировом киберсообществе: со времён Wannacry мы не видели такого воздействия. причина:...
cve-2021-44228-log4shell_rce_reproduction
CVE-2021-44228 — Log4Shell: Apache Log4j2 Remote Code Execution CVSS 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | CWE-917: Improper Neutralization for Expression Language Injection Overview Log4Shell CVE-2021-44228 is arguably the most severe vulnerability of the 2020s, affecting...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: wildfly-security-manager (UTSA-2026-031619)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031619 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...
CVE-2022-31095
discourse-chat is a chat plugin for the Discourse application. Versions prior to 0.4 are vulnerable to an exposure of sensitive information, where an attacker who knows the message ID for a channel they do not have access to can view that message using the chat message lookup endpoint, primarily...
CVE-2022-31095 Exposure of Sensitive Information in discourse-chat
discourse-chat is a chat plugin for the Discourse application. Versions prior to 0.4 are vulnerable to an exposure of sensitive information, where an attacker who knows the message ID for a channel they do not have access to can view that message using the chat message lookup endpoint, primarily...
FreeBSD : OpenSearch -- Log4Shell (b0f49cb9-6736-11ec-9eea-589cfc007716)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b0f49cb9-6736-11ec-9eea-589cfc007716 advisory. - It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain...
Apache Log4Shell CVE-2021-45046 Bypass Remote Code Execution
Binary data apachelog4shellCVE-2021-45056directcheck.nbin...
CVE-2021-45046
It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map MDC input data when the logging configuration uses a non-default Pattern Layout with either a Context...