Lundi 1 mai 2023
3 CVE
-
Oracle WebLogic Server
Oracle WebLogic Server Unspecified Vulnerability — Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server.
-
TP-Link Archer AX21
TP-Link Archer AX-21 Command Injection Vulnerability — TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution.
-
Apache Log4j2
Apache Log4j2 Deserialization of Untrusted Data Vulnerability — Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.