Attributed metadata history

Up to 100 retained publisher events per page for CVE-2017-5645. Withdrawals and unavailable references remain attributed to their publishers.

nvd

observed · 2026-10-12 05:15:12 UTC

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.

Fingerprint: 5eac47a8ea598616fe8f6cbaf86b629dc987c36e6f11eb9c74e41ba90d5840ce

nvd

available · 2026-10-12 04:02:58 UTC

available

Fingerprint: 1a480b1c570dfec82c1cc39b732387360c17935637e0981c7b0fd9c8798dc341