log4j vulnerabilities (Red Hat)
55 vulnerabilities.
-
log4jRed Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. 8.8 High -
log4jRed Hat SQL injection in JDBC Appender in Apache Log4j V1 9.8 Critical -
log4jRed Hat Deserialization of untrusted data in JMSSink in Apache Log4j 1.x 8.8 High -
log4jRed Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 7.5 High -
log4jRed Hat Deserialization of Untrusted Data in Log4j 9.8 Critical -
log4jRed Hat Deserialization of Untrusted Data in Log4j 9.8 Critical -
log4jRed Hat The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node... 5.0 Medium -
log4jRed Hat jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss... 6.8 Medium -
log4jRed Hat Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache... 4.3 Medium -
log4jRed Hat Improper Neutralization of Input During Web Page Generation in Apache Tomcat 4.3 Medium -
log4jRed Hat Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat 1.2 Low -
log4jRed Hat Improper Neutralization of Input During Web Page Generation in Apache Tomcat 4.3 Medium -
log4jRed Hat Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache... 5.0 Medium -
log4jRed Hat The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow... 5.0 Medium -
log4jRed Hat The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD)... 2.1 Low -
log4jRed Hat Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC... 6.8 Medium -
log4jRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 2.6 Low -
log4jRed Hat The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15,... 4.3 Medium -
log4jRed Hat The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended... 5.0 Medium -
log4jRed Hat The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the... 2.6 Low -
log4jRed Hat Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable... 10.0 High -
log4jRed Hat The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion... 7.1 High -
log4jRed Hat Directory Traversal in Apache Tomcat 5.0 Medium -
log4jRed Hat Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big... 6.4 Medium -
log4jRed Hat Exposure of Sensitive Information in Apache Tomcat 4.3 Medium -
log4jRed Hat Apache Tomcat Denial of Service via Malformed Request Headers 5.0 Medium -
log4jRed Hat The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7,... 7.5 High -
log4jRed Hat The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5... 4.3 Medium -
log4jRed Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4... 5.0 Medium -
log4jRed Hat Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0... 4.3 Medium -
log4jRed Hat Apache Tomcat Path Traversal Vulnerability 5.0 Medium -
log4jRed Hat Apache Tomcat Cross-site scripting (XSS) vulnerability 4.3 Medium -
log4jRed Hat The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the... 5.0 Medium -
log4jRed Hat Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of... 5.0 Medium -
log4jRed Hat Exposure of Sensitive Information in Apache Tomcat 5.0 Medium -
log4jRed Hat The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5... 5.0 Medium -
log4jRed Hat mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40... 4.3 Medium -
log4jRed Hat Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2... 4.3 Medium -
log4jRed Hat Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3... 4.3 Medium -
log4jRed Hat Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in... 7.5 High -
log4jRed Hat Apache Tomcat Path Traversal Vulnerability 3.5 Low -
log4jRed Hat Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2... 4.3 Medium -
log4jRed Hat The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a... 5.0 Medium -
log4jRed Hat Apache Tomcat Mishandles Character Sequence in Cookies 4.3 Medium -
log4jRed Hat Apache Tomcat treats single quotes as delimiters in cookies 4.3 Medium -
log4jRed Hat cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a... 5.0 Medium -
log4jRed Hat Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP... 4.3 Medium -
log4jRed Hat Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a... 4.7 Medium -
log4jRed Hat Apache Tomcat XSS In Accept-Language Headers 2.6 Low -
log4jRed Hat PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not... 5.0 Medium - Show olderLoading…