Java - CVE CyberSecurity Database News (Page 148)

Jan 18, 2022 API Exploit SQL Java Apache

CVE-2022-23305 - JDBCAppender in Log4j 1.2.x – The Hidden Danger of SQL Injection

Did you know a logging library could make your app vulnerable to severe security attacks like SQL Injection? Most developers worry about vulnerabilities in the

Jan 18, 2022 RCE Exploit Java Apache

CVE-2022-23302 - JMSSink Deserialization Vulnerability in Log4j 1.x — Explained

Published: June 2024 CVE: CVE-2022-23302 Component: Apache Log4j 1.x Exploit Impact: Remote Code Execution (RCE) via JNDI What Is CVE-2022-23302? CVE-2022-23302 is a serious

Jan 18, 2022 RCE Exploit Java Apache

CVE-2022-23307 - Understanding Deserialization Vulnerabilities in Apache Chainsaw and Log4j

If you work with logs in Java, you've probably come across tools like Apache Chainsaw or libraries like Log4j. But what happens when

Dec 10, 2021 Exploit Java Apache

CVE-2021-44228 - How Attackers Exploited Apache Log4j2’s JNDI Flaw – What You Need to Know

In December 2021, a shocking vulnerability rocked the internet: CVE-2021-44228, also called Log4Shell. Found in the super-popular logging tool Apache Log4j2, this bug’s impact

Jul 17, 2014 Java Oracle

CVE-2014-4263 - Oracle Java SE’s Unspecified Diffie-Hellman Key Agreement Flaw Explained (With Exploit Insights)

In June 2014, Oracle released a critical security advisory addressing a set of vulnerabilities across its Java SE products. One of the high-severity flaws tagged