CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

147 matches found

Kitploit•added 2026/10/27 3:51 a.m.•20 views

Log4j_CVE-2021-44228

Log4j CVE-2021-44228 Solutions Think about if you actually really require Log4j2 Core. Most likely, your own code or some 3rd-party library you depend on only need Log4j's Logging API façade - but can log to another back-end. You could therefore simply completely exclude the...

10CVSS7.9AI score0.99999EPSS

SaveExploits389References11

Tenable Nessus•added 2026/10/01 12:00 a.m.•8 views

Rocky Linux 9.6 [TuxCare] Security Update: log4j / log4j-jcl / log4j-slf4j / log4j-web (ALMALINUX9.6:CLSA-2026:1784624635)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784624635 advisory. - Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is no...

7.5CVSS6.3AI score0.00691EPSS

SaveExploits0References3

Tenable Nessus•added 2026/10/01 12:00 a.m.•8 views

Rocky Linux 9.2 [CIQ] Security Update: log4j / log4j-jcl / log4j-slf4j Multiple Vulnerabilities (ciqsa-2026_1523)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261523 advisory. This advisory aggregates security fixes for the log4j SRPM in CIQ LTS 9.2. It addresses 4 CVEs: CVE-2021-44228, CVE-2021-44832, CVE-2021-45105,...

10CVSS7.7AI score0.99999EPSS

SaveExploits394References10

Tenable Nessus•added 2026/09/30 12:00 a.m.•12 views

AlmaLinux 9.2 [TuxCare] Security Update: log4j / log4j-jcl / log4j-slf4j / log4j-web (ALMALINUX9.2:CLSA-2026:1787235852)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787235852 advisory. - Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not...

7.5CVSS6.3AI score0.00691EPSS

SaveExploits0References3

NVD•added 2026/09/16 10:16 a.m.•23 views

CVE-2026-84501

An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble", ... request containing newline characters \n. When the ensemble name doesn't match, EnsembleAuthenticationProvider.handleAuthentication logs the raw,...

5.3CVSS0.00742EPSS

SaveExploits0References2

EUVD•added 2026/09/16 9:28 a.m.•22 views

EUVD-2026-80334

5.3CVSS7.4AI score0.00742EPSS

SaveExploits0References1

vulnersOsv•added 2026/07/24 9:46 p.m.•6 views

org.openidentityplatform.openam:openam-slf4j (>=16.0.1, <=16.1.1), org.openidentityplatform.opendj:opendj-dsml-servlet (>=5.0.1, <=5.1.1) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (>=5.0.1, <=5.1.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =5.0.1, =16.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.1.1 Source cves: CVE-2026-73644 Source advisory: GHSA-P279-2CQP-84JG...

9.6CVSS5.8AI score0.00413EPSS

SaveExploits0

vulnersOsv•added 2026/07/24 9:46 p.m.•2 views

9.6CVSS5.8AI score0.00413EPSS

SaveExploits0