https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:55:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-00725 bdu:2022-00725 https://cve.radiocsirt.org/vuln/bdu:2022-00725 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1001 certfr-2022-avi-1001 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1001 https://cve.radiocsirt.org/vuln/cnvd-2022-05030 cnvd-2022-05030 https://cve.radiocsirt.org/vuln/cnvd-2022-05030 https://cve.radiocsirt.org/vuln/euvd-2026-32131 EUVD-2026-32131 https://cve.radiocsirt.org/vuln/euvd-2026-32131 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42550 <p>In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.</p> <p>In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-42550 https://cve.radiocsirt.org/vuln/ghsa-668q-qrv7-99fm <p><strong>Affected:</strong> Maven: ch.qos.logback:logback-core</p> <p>In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.</p> <p><strong>Affected:</strong> Maven: ch.qos.logback:logback-core</p> <p>In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.</p> https://cve.radiocsirt.org/vuln/ghsa-668q-qrv7-99fm https://cve.radiocsirt.org/vuln/gsd-2021-42550 gsd-2021-42550 https://cve.radiocsirt.org/vuln/gsd-2021-42550 https://cve.radiocsirt.org/vuln/icsa-22-314-03 <p>In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.</p> <p>In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.</p> https://cve.radiocsirt.org/vuln/icsa-22-314-03 https://cve.radiocsirt.org/vuln/oesa-2021-1476 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: logback, openEuler:20.03-LTS-SP2: logback</p> <p>Logback is intended as a successor to the popular log4j project. Security Fix(es): In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.(CVE-2021-42550)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: logback, openEuler:20.03-LTS-SP2: logback</p> <p>Logback is intended as a successor to the popular log4j project. Security Fix(es): In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.(CVE-2021-42550)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1476 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12026-1 <p>logback-1.2.11-1.1 on GA media</p> <p>logback-1.2.11-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12026-1 https://cve.radiocsirt.org/vuln/rhsa-2022:1108 <p>netty: Information disclosure via the local system temporary directory springframework: malicious input leads to insertion of additional log entries apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 jdom: XXE allows attackers to cause a DoS via a crafted HTTP request logback: remote code execution through JNDI call from within its configuration file</p> <p>netty: Information disclosure via the local system temporary directory springframework: malicious input leads to insertion of additional log entries apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 jdom: XXE allows attackers to cause a DoS via a crafted HTTP request logback: remote code execution through JNDI call from within its configuration file</p> https://cve.radiocsirt.org/vuln/rhsa-2022:1108 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-42550 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: logback, Ubuntu:Pro:18.04:LTS: logback, Ubuntu:Pro:20.04:LTS: logback</p> <p>In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: logback, Ubuntu:Pro:18.04:LTS: logback, Ubuntu:Pro:20.04:LTS: logback</p> <p>In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-42550 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0572 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Logback ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Logback ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0572