Most recent entries from all

bdu:2021-01050

certfr-2022-avi-090 — De multiples vulnérabilités ont été découvertes dans Foxit PDF Reader et Foxit PDF Editor. Certaines d'entre elles perm…

certfr-2022-avi-090

cnvd-2020-32847

EUVD-2026-61121

fkie_cve-2018-1285

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.

GHSA-2cwj-8chv-9pp9 — XML External Entity attack in log4net

Affected: NuGet: log4net

Apache log4net before 2.0.10 does not disable XML external entities when parsing log4net configuration files. This could allow for XXE-based attacks in applications that accept arbitrary configuration files from users.

gsd-2018-1285

ICSA-24-226-02 — Rockwell Automation AADvance Standalone OPC-DA Server

An arbitrary code execution vulnerability exists in the affected product. The log4net config file does not disable XML external entities. An arbitrary code execution vulnerability exists in the affected product. The vulnerability occurs due to a vulnerable component, the format string in log4net.

openSUSE-SU-2024:12311-1 — log4net-1.2.10-78.1 on GA media

log4net-1.2.10-78.1 on GA media

UBUNTU-CVE-2018-1285

Affected: Ubuntu:16.04:LTS: log4net, Ubuntu:18.04:LTS: log4net, Ubuntu:20.04:LTS: log4net, Ubuntu:22.04:LTS: log4net

VDE-2021-041 — Pepperl+Fuchs: Multiple DTM and VisuNet Software affected by log4net vulnerability

Critical vulnerabilities have been discovered in the utilized component log4net by Apache Software Foundation.

UPDATE A: Remediation: added fixed VisuNet Products

VDE-2024-004 — TRUMPF: Multiple products affected by log4net vulnerability