Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2018-1285
Disclosure Date: May 11, 2020 (last updated February 21, 2025)
Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.
0
Attacker Value
Unknown
CVE-2006-0743
Disclosure Date: March 09, 2006 (last updated October 04, 2023)
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
0
