https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T09:50:48.826955+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2018-1285 CVE-2018-1285 2026-10-05T09:50:48.856209+00:00

Affected: Apache log4net

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.

 https://vulnerability.circl.lu/vuln/usn-4699-1 USN-4699-1 — log4net vulnerability 2026-10-05T09:50:48.856334+00:00

Affected: Ubuntu:16.04:LTS: log4net, Ubuntu:18.04:LTS: log4net, Ubuntu:20.04:LTS: log4net

It was discovered that Apache Log4net incorrectly handled certain configuration files. An attacker could possibly use this issue to expose sensitive information.