Most recent entries from all

bdu:2020-03624

certfr-2020-avi-667 — De multiples vulnérabilités ont été découvertes dans Oracle Weblogic. Certaines d'entre elles permettent à un attaquant…

certfr-2020-avi-667

cnvd-2020-32881

EUVD-2026-322856

fkie_cve-2020-9488

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1

GHSA-vwqq-5vrc-xw9h — Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

Affected: Maven: org.apache.logging.log4j:log4j, Maven: org.apache.logging.log4j:log4j-core

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender prior to version 2.13.2. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender.

gsd-2020-9488

openSUSE-SU-2024:11025-1 — log4j-2.13.2-1.9 on GA media

log4j-2.13.2-1.9 on GA media

RHSA-2020:2391 — Red Hat Security Advisory: Red Hat build of Eclipse Vert.x 3.9.1 security update

log4j: improper validation of certificate with host mismatch in SMTP appender

UBUNTU-CVE-2020-9488

Affected: Ubuntu:Pro:16.04:LTS: apache-log4j2, Ubuntu:18.04:LTS: apache-log4j2, Ubuntu:20.04:LTS: apache-log4j2

WID-SEC-W-2023-1048 — Oracle Construction and Engineering: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Construction and Engineering ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.