https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:52:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-02355 bdu:2020-02355 https://cve.radiocsirt.org/vuln/bdu:2020-02355 https://cve.radiocsirt.org/vuln/certfr-2020-avi-350 certfr-2020-avi-350 https://cve.radiocsirt.org/vuln/certfr-2020-avi-350 https://cve.radiocsirt.org/vuln/cnvd-2020-00502 cnvd-2020-00502 https://cve.radiocsirt.org/vuln/cnvd-2020-00502 https://cve.radiocsirt.org/vuln/euvd-2026-322569 EUVD-2026-322569 https://cve.radiocsirt.org/vuln/euvd-2026-322569 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17571 <p>Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.</p> <p>Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-17571 https://cve.radiocsirt.org/vuln/ghsa-2qrg-x229-3v8q <p><strong>Affected:</strong> Maven: log4j:log4j, Maven: org.zenframework.z8.dependencies.commons:log4j-1.2.17</p> <p>Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions 1.2 up to 1.2.17.</p> <p>Users are advised to migrate to `org.apache.logging.log4j:log4j-core`.</p> <p><strong>Affected:</strong> Maven: log4j:log4j, Maven: org.zenframework.z8.dependencies.commons:log4j-1.2.17</p> <p>Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions 1.2 up to 1.2.17.</p> <p>Users are advised to migrate to `org.apache.logging.log4j:log4j-core`.</p> https://cve.radiocsirt.org/vuln/ghsa-2qrg-x229-3v8q https://cve.radiocsirt.org/vuln/gsd-2019-17571 gsd-2019-17571 https://cve.radiocsirt.org/vuln/gsd-2019-17571 https://cve.radiocsirt.org/vuln/ncsc-2026-0091 NCSC-2026-0091 https://cve.radiocsirt.org/vuln/ncsc-2026-0091 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0051-1 <p>Security update for log4j</p> <p>Security update for log4j</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0051-1 https://cve.radiocsirt.org/vuln/rhsa-2017:1801 <p>openssl: OCSP Status Request extension unbounded memory growth openssl: ECDSA P-256 timing attack key recovery SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS log4j: Socket receiver deserialization vulnerability tomcat: Incorrect handling of pipelined requests when send file was used tomcat: Calls to application listeners did not use the appropriate facade object tomcat: Security constrained bypass in error page mechanism tomcat: Vary header not added by CORS filter leading to cache poisoning log4j: deserialization of untrusted data in SocketServer</p> <p>openssl: OCSP Status Request extension unbounded memory growth openssl: ECDSA P-256 timing attack key recovery SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS log4j: Socket receiver deserialization vulnerability tomcat: Incorrect handling of pipelined requests when send file was used tomcat: Calls to application listeners did not use the appropriate facade object tomcat: Security constrained bypass in error page mechanism tomcat: Vary header not added by CORS filter leading to cache poisoning log4j: deserialization of untrusted data in SocketServer</p> https://cve.radiocsirt.org/vuln/rhsa-2017:1801 https://cve.radiocsirt.org/vuln/suse-su-2020:0053-1 <p>Security update for log4j</p> <p>Security update for log4j</p> https://cve.radiocsirt.org/vuln/suse-su-2020:0053-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17571 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: apache-log4j1.2, Ubuntu:Pro:16.04:LTS: apache-log4j1.2, Ubuntu:18.04:LTS: apache-log4j1.2</p> <p>Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: apache-log4j1.2, Ubuntu:Pro:16.04:LTS: apache-log4j1.2, Ubuntu:18.04:LTS: apache-log4j1.2</p> <p>Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17571 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0368 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache log4j ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache log4j ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0368