Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Denial of Service (DoS)CVE-2023-26464
Affects log4j:log4j | Versions [1.0.4,]
Has fix
MavenPublished 11 Mar 2023
  • H
Deserialization of Untrusted DataCVE-2022-23302
Affects log4j:log4j | Versions [0,]
Has fix
MavenPublished 18 Jan 2022
  • H
SQL InjectionCVE-2022-23305
Affects log4j:log4j | Versions [0,]
Has fix
MavenPublished 18 Jan 2022
  • H
Deserialization of Untrusted DataCVE-2022-23307
Affects log4j:log4j | Versions [0,]
Has fix
MavenPublished 18 Jan 2022
  • M
Arbitrary Code ExecutionCVE-2021-4104
Affects log4j:log4j | Versions [0,]
Has fix
MavenPublished 13 Dec 2021
  • C
Deserialization of Untrusted DataCVE-2019-17571
Affects log4j:log4j | Versions [0,]
Has fix
MavenPublished 19 Jun 2020
  • L
Man-in-the-Middle (MitM)CVE-2020-9488
Affects log4j:log4j | Versions [0,]
Has fix
MavenPublished 28 Apr 2020
  • L
Man-in-the-Middle (MitM)CVE-2020-9488
Affects org.apache.logging.log4j:log4j | Versions [,2.13.2)
Has fix
MavenPublished 28 Apr 2020
  • C
Deserialization of Untrusted DataCVE-2017-5645
Affects org.apache.logging.log4j:log4j | Versions [2.0,2.8.2)
Has fix
MavenPublished 21 May 2017
  • M
Improper Encoding or Escaping of OutputCVE-2026-49844
Affects org.apache.logging.log4j:log4j-api | Versions [2.13.1,2.25.5)[2.26.0,2.26.1)[3.0.0-alpha1,]
Has fix
MavenPublished 12 Jul 2026
  • H
Improper Encoding or Escaping of OutputCVE-2026-34479
Affects org.apache.logging.log4j:log4j-core | Versions [2.7, 2.25.4)[3.0.0-alpha1,]
Has fix
MavenPublished 10 Apr 2026
  • H
Improper Encoding or Escaping of OutputCVE-2026-34480
Affects org.apache.logging.log4j:log4j-core | Versions [2.0-alpha1, 2.25.4)[3.0.0-alpha1,]
Has fix
MavenPublished 10 Apr 2026
  • H
Improper Output Neutralization for LogsCVE-2026-34478
Affects org.apache.logging.log4j:log4j-core | Versions [2.21.0, 2.25.4)[3.0.0-beta1,]
Has fix
MavenPublished 10 Apr 2026
  • M
Improper Validation of Certificate with Host MismatchCVE-2026-34477
Affects org.apache.logging.log4j:log4j-core | Versions [2.12.0, 2.25.4)[3.0.0-alpha1,]
Has fix
MavenPublished 10 Apr 2026
  • M
Improper Validation of Certificate with Host MismatchCVE-2025-68161
Affects org.apache.logging.log4j:log4j-core | Versions [,2.25.3)
Has fix
MavenPublished 19 Dec 2025
  • M
Arbitrary Code ExecutionCVE-2021-44832
Affects org.apache.logging.log4j:log4j-core | Versions [2.0-beta7,2.3.2)[2.4,2.12.4)[2.13.0,2.17.1)
Has fix
MavenPublished 28 Dec 2021
  • H
Denial of Service (DoS)CVE-2021-45105
Affects org.apache.logging.log4j:log4j-core | Versions [2.0-beta9,2.3.1)[2.4,2.12.3)[2.13.0,2.17.0)
Has fix
MavenPublished 18 Dec 2021
  • C
Remote Code Execution (RCE)CVE-2021-45046
Affects org.apache.logging.log4j:log4j-core | Versions [2.0-beta9,2.3.1)[2.4,2.12.2)[2.13.0,2.16.0)
Has fix
MavenPublished 14 Dec 2021
  • C
Remote Code Execution (RCE)CVE-2021-44228
Affects org.apache.logging.log4j:log4j-core | Versions [2.0-beta9,2.3.1)[2.4,2.12.2)[2.13.0,2.15.0)
Has fix
MavenPublished 10 Dec 2021
  • L
Man-in-the-Middle (MitM)CVE-2020-9488
Affects org.apache.logging.log4j:log4j-core | Versions [,2.13.2)
Has fix
MavenPublished 28 Apr 2020
  • C
Deserialization of Untrusted DataCVE-2017-5645
Affects org.apache.logging.log4j:log4j-core | Versions [,2.8.2)
Has fix
MavenPublished 21 May 2017
  • H
Improper Encoding or Escaping of OutputCVE-2026-34481
Affects org.apache.logging.log4j:log4j-layout-template-json | Versions [2.14.0, 2.25.4)[3.0.0-alpha1,]
Has fix
MavenPublished 10 Apr 2026
  • M
Information ExposureCVE-2022-21704
Affects org.webjars.npm:log4js | Versions [0,]
Has fix
MavenPublished 20 Jan 2022
  • M
Denial of Service (DoS)CVE-2023-26464
Affects org.zenframework.z8.dependencies.commons:log4j-1.2.17 | Versions [0,]
Has fix
MavenPublished 11 Mar 2023
  • H
Deserialization of Untrusted DataCVE-2022-23302
Affects org.zenframework.z8.dependencies.commons:log4j-1.2.17 | Versions [0,]
Has fix
MavenPublished 18 Jan 2022
  • H
SQL InjectionCVE-2022-23305
Affects org.zenframework.z8.dependencies.commons:log4j-1.2.17 | Versions [0,]
Has fix
MavenPublished 18 Jan 2022
  • H
Deserialization of Untrusted DataCVE-2022-23307
Affects org.zenframework.z8.dependencies.commons:log4j-1.2.17 | Versions [0,]
Has fix
MavenPublished 18 Jan 2022
  • M
Arbitrary Code ExecutionCVE-2021-4104
Affects org.zenframework.z8.dependencies.commons:log4j-1.2.17 | Versions [0,]
Has fix
MavenPublished 13 Dec 2021
  • C
Deserialization of Untrusted DataCVE-2019-17571
Affects org.zenframework.z8.dependencies.commons:log4j-1.2.17 | Versions [0,]
Has fix
MavenPublished 19 Jun 2020
  • L
Man-in-the-Middle (MitM)CVE-2020-9488
Affects org.zenframework.z8.dependencies.commons:log4j-1.2.17 | Versions [0,]
Has fix
MavenPublished 28 Apr 2020