2 results (0.002 seconds)

CVSS: 9.8EPSS: 49%CPEs: 11EXPL: 1

CVE-2018-1285 – Ubuntu Security Notice USN-4699-1

https://notcve.org/view.php?id=CVE-2018-1285

11 May 2020 — Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files. Apache log4net versiones anteriores a 2.0.10, no deshabilita las entidades externas XML cuando analiza los archivos de configuración de log4net. Esto permite realizar ataques basados en XXE en aplicaciones que aceptan archivos de configuración log4net controlados por el atacante It w... • https://github.com/alex-ermolaev/Log4NetSolarWindsSNMP- • CWE-611: Improper Restriction of XML External Entity Reference •

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0

CVE-2006-0743

https://notcve.org/view.php?id=CVE-2006-0743

09 Mar 2006 — Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors. • http://issues.apache.org/jira/browse/LOG4NET-67 • CWE-134: Use of Externally-Controlled Format String •