https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 22:37:02 +0000 https://vulnerability.circl.lu/vuln/cve-2019-17571 <p><strong>Affected:</strong> Apache Software Foundation Log4j</p> <p>Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.</p> <p><strong>Affected:</strong> Apache Software Foundation Log4j</p> <p>Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.</p> https://vulnerability.circl.lu/vuln/cve-2019-17571 https://vulnerability.circl.lu/vuln/usn-4495-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: apache-log4j1.2</p> <p>It was discovered that Apache Log4j does not properly deserialize untrusted data. An attacker could possibly use this issue to remotely execute arbitrary code. (CVE-2019-17571)</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: apache-log4j1.2</p> <p>It was discovered that Apache Log4j does not properly deserialize untrusted data. An attacker could possibly use this issue to remotely execute arbitrary code. (CVE-2019-17571)</p> https://vulnerability.circl.lu/vuln/usn-4495-1