CVE-2021-44228

CVE-2021-44228 (Log4Shell) affects Apache Log4j2 2.0-beta9 through 2.15.0 (excluding some security releases) and is specific to log4j-core. The vulnerability arises from JNDI features used in configuration, log messages, and parameters, which can be exploited when an attacker can control log mess...

CVE-2022-20732

Cisco CVE-2022-20732 affects Cisco Virtualized Infrastructure Manager (VIM). The vulnerability stems from improper access permissions on certain configuration files, enabling an authenticated, local attacker with low privileges to read confidential configuration data and internal database credent...