Lucene search
Ranga DuraisamyTRENDMICROBLOG:C927C873A9E9A7AF6B74D64EFAFA6B02HistoryDec 13, 2021 - 12:00 a.m.
Patch Now: Apache Log4j Vulnerability Called Log4Shell Actively Exploited
2021-12-1300:00:00
Ranga Duraisamy
www.trendmicro.com
69
0.975 High
EPSS
Percentile
100.0%
Log4Shell., also known as CVE-2021-44228, was first reported privately to Apache on November 24 and was patched with version 2.15.0 of Log4j on December 9. It affects Apache Struts, Apache Solr, Apache Druid, Elasticsearch, Apache Dubbo, and VMware vCenter.
Related
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-10 05:23:44
Exploit for Improper Input Validation in Apache Log4J
2021-12-21 08:13:35
Exploit for Expression Language Injection in Apache Log4J
2021-12-14 14:51:26
ibm
ibm
cisa_kev
cisa_kev
Apache Log4j2 Remote Code Execution Vulnerability
2021-12-10 00:00:00
osv
osv
Critical vulnerability in log4j may affect generated PEAR projects
2021-12-16 21:01:51
hivepro
hivepro
Iranian hackers leveraged Log4Shell to penetrate US federal agency
2022-11-17 12:28:57
packetstorm
packetstorm
Intel Data Center Manager 5.1 Local Privilege Escalation
2022-12-09 00:00:00
Log4Shell HTTP Header Injection
2022-01-12 00:00:00
MobileIron Log4Shell Remote Command Execution
2022-08-03 00:00:00
msrc
msrc
CVE-2021-44228 Apache Log4j 2 に対するマイクロソフトの対応
2021-12-12 08:00:00
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 05:28:18
trellix
trellix
Log4J and The Memory That Knew Too Much
2022-01-19 00:00:00
mssecure
mssecure
MERCURY and DEV-1084: Destructive attack on hybrid environment
2023-04-07 16:00:00
rapid7blog
rapid7blog
Metasploit Framework 6.4 Released
2024-03-25 13:33:28
Log4Shell Makes Its Appearance in Hacker Chatter: 4 Observations
2021-12-14 21:05:17
[Security Nation] Mike Hanley of GitHub on the Log4j Vulnerability
2022-01-19 21:47:30
openvas
openvas
Debian: Security Advisory (DLA-2842-1)
2021-12-13 00:00:00
openSUSE: Security Advisory for logback (openSUSE-SU-2021:1613-1)
2022-02-01 00:00:00
wallarmlab
wallarmlab
Update on Log4Shell (CVE-2021-44228)
2021-12-10 20:22:36
threatpost
threatpost
Where the Latest Log4Shell Attacks Are Coming From
2021-12-13 19:00:01
What the Log4Shell Bug Means for SMBs: Experts Weigh In
2021-12-14 17:54:47
The 5 Most-Wanted Threatpost Stories of 2021
2021-12-27 18:57:24
nessus
nessus
VMware vCenter Log4Shell Direct Check (CVE-2021-44228) (VMSA-2021-0028)
2021-12-13 00:00:00
FreeBSD : graylog -- include log4j patches (3fadd7e4-f8fb-45a0-a218-8fd6423c338f)
2021-12-13 00:00:00
FreeBSD : OpenSearch -- Log4Shell (4b1ac5a3-5bd4-11ec-8602-589cfc007716)
2021-12-13 00:00:00
redhat
redhat
impervablog
impervablog
Continuing to Stay Ahead of CVE-2021-44228: Addressing Your Top Questions
2021-12-14 22:55:49
Analytics Are Essential for Effective Database Security
2022-01-13 15:23:02
How We’re Protecting Customers & Staying Ahead of CVE-2021-44228
2021-12-11 02:31:39
kaspersky
kaspersky
KLA12390 RCE vulnerability in Apache Log4j
2021-12-10 00:00:00
KLA12392 RCE vulnerability in Microsoft Azure
2021-12-16 00:00:00
KLA12395 RCE vulnerability in Microsoft SQL Server
2021-12-16 00:00:00
akamaiblog
akamaiblog
Threat Intelligence on Log4j CVE: Key Findings and Their Implications
2021-12-17 19:30:00
fedora
fedora
[SECURITY] Fedora 34 Update: log4j-2.16.0-1.fc34
2021-12-22 01:14:26
qualysblog
qualysblog
Log4Shell – Follow This Multi-Layered Approach for Detection and Remediation
2021-12-28 18:00:00
Log4Shell Exploit Detection and Response with Qualys Multi-Vector EDR
2021-12-14 23:55:59
hackerone
hackerone
U.S. Dept Of Defense: ███ ████████ running a vulnerable log4j
2021-12-31 00:55:49
U.S. Dept Of Defense: ██████████ running a vulnerable log4j
2021-12-11 00:16:38
amd
amd
AMD Response to Log4j (Log4Shell) Vulnerability
2021-12-15 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2021-12-10 15:09:45
cisa
cisa
talosblog
talosblog
How CVSS 4.0 changes (or doesn’t) the way we see vulnerability severity
2024-02-21 13:54:48
cve
cve
CVE-2021-44228
2021-12-10 10:15:09
github
github
Using GitHub’s security features to help identify Log4j exposure in your codebase
2021-12-14 19:46:00
Critical vulnerability in log4j may affect generated PEAR projects
2021-12-16 21:01:51
freebsd
freebsd
openhab -- log4j remote code injection
2021-12-10 00:00:00
qt
qt
suse
suse
Security update for log4j (important)
2021-12-15 00:00:00
Security update for logback (important)
2021-12-17 00:00:00