Lucene search
+L

8 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2025-25621

Malicious code in bioql PyPI...

5.4CVSS6.3AI score0.01162EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/08/25 11:22 p.m.4 views

SUSE CVE-2025-54812

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoretically inject HTML or Javascript in order t...

5.4CVSS6.5AI score0.01162EPSS
SaveExploits0References3
NVD
NVD
added 2025/08/22 7:15 p.m.6 views

CVE-2025-54812

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoretically inject HTML or Javascript in order t...

5.4CVSS0.01162EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/08/22 6:46 p.m.3 views

CVE-2025-54812 Apache Log4cxx: Improper HTML escaping in HTMLLayout

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoretically inject HTML or Javascript in order t...

2.1CVSS6.1AI score0.01162EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/08/22 6:46 p.m.14 views

CVE-2025-54812 Apache Log4cxx: Improper HTML escaping in HTMLLayout

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoretically inject HTML or Javascript in order t...

2.1CVSS0.01162EPSS
SaveExploits0References3
OSV
OSV
added 2025/08/22 6:46 p.m.6 views

CVE-2025-54812 Apache Log4cxx: Improper HTML escaping in HTMLLayout

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoretically inject HTML or Javascript in order t...

2.1CVSS6.2AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2025/08/22 6:46 p.m.10 views

CVE-2025-54812

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoretically inject HTML or Javascript in order t...

5.4CVSS5.2AI score0.01162EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.11 views

PT-2025-34481

Name of the Vulnerable Software and Affected Versions: Apache Log4cxx versions prior to 1.5.0 Description: Apache Log4cxx contains an Improper Output Neutralization for Logs issue. When using HTMLLayout, logger names are not properly escaped when writing to an HTML file. If untrusted data is used...

7.5CVSS5.3AI score0.01298EPSS
SaveExploits0References20
Rows per page
Query Builder