qos kayıtları
qos üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %90
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-502 Deserialization of Untrusted Data6
- CWE-295 Improper Certificate Validation1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
59Planlayın | CVE-2022-23305Kavram kanıtı | SQL injection in JDBC Appender in Apache Log4j V1apache · log4j · CWE-89 | Kritik9,8 | — | %66,5 | 18 Oca 2022 |
54Planlayın | CVE-2022-23302İstismar yok | Deserialization of untrusted data in JMSSink in Apache Log4j 1.xapache · log4j · CWE-502 | Yüksek8,8 | — | %63,6 | 18 Oca 2022 |
51Planlayın | CVE-2022-23307İstismar yok | A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.apache · chainsaw · CWE-502 | Yüksek8,8 | — | %54,4 | 18 Oca 2022 |
43Planlayın | CVE-2018-8088İstismar yok | org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restricqos · slf4j | Kritik9,8 | — | %14,7 | 20 Mar 2018 |
41Planlayın | CVE-2017-5929İstismar yok | QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.qos · logback · CWE-502 | Kritik9,8 | — | %7,5 | 13 Mar 2017 |
40Planlayın | CVE-2020-9493İstismar yok | Java deserialization in Chainsawapache · chainsaw · CWE-502 | Kritik9,8 | — | %4,6 | 16 Haz 2021 |
30İzleyin | CVE-2023-6378İstismar yok | Logback "receiver" DOS vulnerabilityqos · logback · CWE-502 | Yüksek7,5 | — | %0,9 | 29 Kas 2023 |
30İzleyin | CVE-2023-6481İstismar yok | Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fixqos · logback | Yüksek7,5 | — | %0,7 | 4 Ara 2023 |
27İzleyin | CVE-2021-42550İstismar yok | RCE from attacker with configuration edit priviledges through JNDI lookupqos · logback · CWE-502 | Orta6,6 | — | %4,4 | 16 Ara 2021 |
16İzleyin | CVE-2020-9488Kavram kanıtı | Improper validation of certificate with host mismatch in Apache Log4j SMTP appender.apache · log4j · CWE-295 | Düşük3,7 | — | %8,1 | 27 Nis 2020 |
- CVE-2022-2330559Planlayın
SQL injection in JDBC Appender in Apache Log4j V1
KritikCVSS 9,8Kavram kanıtıEPSS %67apache · log4j18 Oca 2022
- CVE-2022-2330254Planlayın
Deserialization of untrusted data in JMSSink in Apache Log4j 1.x
YüksekCVSS 8,8İstismar yokEPSS %64apache · log4j18 Oca 2022
- CVE-2022-2330751Planlayın
A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.
YüksekCVSS 8,8İstismar yokEPSS %54apache · chainsaw18 Oca 2022
- CVE-2018-808843Planlayın
org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restric
KritikCVSS 9,8İstismar yokEPSS %15qos · slf4j20 Mar 2018
- CVE-2017-592941Planlayın
QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.
KritikCVSS 9,8İstismar yokEPSS %8qos · logback13 Mar 2017
- CVE-2020-949340Planlayın
Java deserialization in Chainsaw
KritikCVSS 9,8İstismar yokEPSS %5apache · chainsaw16 Haz 2021
- CVE-2023-637830İzleyin
Logback "receiver" DOS vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1qos · logback29 Kas 2023
- CVE-2023-648130İzleyin
Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix
YüksekCVSS 7,5İstismar yokEPSS %1qos · logback4 Ara 2023
- CVE-2021-4255027İzleyin
RCE from attacker with configuration edit priviledges through JNDI lookup
OrtaCVSS 6,6İstismar yokEPSS %4qos · logback16 Ara 2021
- CVE-2020-948816İzleyin
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender.
DüşükCVSS 3,7Kavram kanıtıEPSS %8apache · log4j27 Nis 2020