CVE-2021-44228

CVE-2021-44228 (Log4Shell) affects Apache Log4j2 2.0-beta9 through 2.15.0 (excluding some security releases) and is specific to log4j-core. The vulnerability arises from JNDI features used in configuration, log messages, and parameters, which can be exploited when an attacker can control log mess...

CVE-2018-0107

Cisco Prime Service Catalog’s web framework contains a CSRF vulnerability (CVE-2018-0107) that could allow an unauthenticated, remote attacker to perform unwanted actions due to missing CSRF protection. The issue is documented across multiple sources (NVD/CVE entry, CNVD, CNVD CISCO advisory), wi...