NewsCisco Talos
There's only so much code: the rise in vulnerability numbers
Teaser from the source
The September Microsoft Patch Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities were just dropped. Compared to a pre-June average of 100 a month, that increase is staggering. Where did they come from? And what does the future look like?
This is the RSS-feed teaser. Read the full article at the original source.
Read at Cisco TalosLinked advisories
- CVE-2021-44228[UPDATE] Zero-Day Vulnerability in Apache Java Logging Library Log4j
- CVE-2021-44228Red Hat Security Advisory: Openshift Logging security and bug update (5.3.1)
- CVE-2021-44228Debian apache-log4j2: security update
- CVE-2021-44228Siemens ProductCERT Advisory SSA-479842
- CVE-2021-44228Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update
- CVE-2021-44228Red Hat Security Advisory: Openshift Logging security and bug update (5.2.4)
- CVE-2021-44228Red Hat Security Advisory: Openshift Logging security and bug update (5.1.5)
- CVE-2021-44228Siemens ProductCERT Advisory SSA-714170
- CVE-2021-44228Apache Log4j2: Deserialisierung nicht vertrauenswürdiger Daten
- CVE-2021-44228Apache Log4j2 — Apache Log4j2 Remote Code Execution Vulnerability
- CVE-2021-44228[Update] Immediate Actions to Protect Against Exploitation of the Apache Java Logging Library Log4j Vulnerability
- CVE-2021-44228Remote code injection in Log4j
- CVE-2021-44228Red Hat Security Advisory: Red Hat Fuse 7.10.0 release and security update
- CVE-2021-44228Siemens ProductCERT Advisory SSA-661247
- CVE-2021-44228Siemens ProductCERT Advisory SSA-397453
- CVE-2021-44228Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.12 security update
Affected vendors and products
- Apache Software Foundation Apache Log4j Core
- Apache Software Foundation Apache Log4j2
- Apple Apple Xcode
- Bentley
- Cisco Business Process Automation
- Cisco Cisco Common Services Platform Collector Software
- Cisco Cisco Connected Mobile Experiences 10.2(1.0)
- Cisco Cisco Crosswork Network Change Automation
- Cisco Cisco CX Cloud Agent
- Cisco Cisco Cyber Vision
- Cisco Cisco Data Center Network Manager
- Cisco Dna Spaces\
More on There's
Other advisories
- Not ratedosv:CLEANSTART-2024-CX85115There's a memory leak in yajl 2
- Not ratedosv:CLEANSTART-2025-PR78775There's a flaw in OpenEXR's Scanline API functionality in versions before 3
- Not ratedosv:CLEANSTART-2025-VY04636There's a flaw in OpenEXR's scanline input file functionality in versions before 3
- Not ratedosv:CLEANSTART-2025-WN52818There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3
- Not ratedosv:CLEANSTART-2025-IJ57983There's a flaw in OpenEXR in versions before 3
- Not ratedosv:CLEANSTART-2025-QD98175There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3
- Not ratedosv:CLEANSTART-2025-MO99178There's a flaw in lz4
- Not ratedosv:CLEANSTART-2026-HR57844There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads
Other news entries
- ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesNewsThe Hacker News
- Alibaba's Qwen AI caught trying to contact server in ChinaNewsThe Register — Security
- There's a third PHP2Shell bug, but it won't get an emergency fixNewsThe Register — Security
- I had plans for that secondNewsCisco Talos
- PHP blames supply chain security biz Chainguard for putting huge chunks of the web at riskNewsThe Register — Security
- University of Copenhagen breach exposes data of 525,000 peopleBreachpwn.watch
- Imagine there's no Shiny Hunters – AI could make human hacking crews obsoleteNewsThe Register — Security
- There's a new way to break RSA that's faster than anything we've seen beforeNewsArs Technica — Security
Source: https://blog.talosintelligence.com/theres-only-so-much-code-the-rise-in-vulnerability-numbers/
ID