Home/Alerts/Alert detail/

Log4Shell

Type:
Active

Alerts

Log4Shell (CVE-2021-44228)

Log4Shell (CVE-2021-45046)

Latest Security News

Biden signs executive order to bolster national cybersecurity

Wolf Haldenstein law firm says 3.5 million impacted by data breach

FTC sues GoDaddy for years of poor hosting security practices

New UEFI Secure Boot flaw exposes systems to bootkits, patch now

MFA Failures - The Worst is Yet to Come

Strategic Approaches to Threat Detection, Investigation & Response

Critical SimpleHelp vulnerabilities fixed, update your server instances!

Risk, Reputational Scores Enjoy Mixed Success as Security Tools

Top Alert List

Content Security Policy (CSP) Header Not Set

CSP

MediumAbsence of Anti-CSRF Tokens

MediumMissing Anti-clickjacking Header

InformationalModern Web Application

InformationalInformation Disclosure - Suspicious Comments

LowCross-Domain JavaScript Source File Inclusion

MediumContent Security Policy (CSP) Header Not Set

InformationalRe-examine Cache-control Directives

LowX-Content-Type-Options Header Missing

Top CVE List

CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability

CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability

CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability

CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Top CWE List

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CWE-581 Object Model Violation: Just One of Equals and Hashcode Defined

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-1053 Missing Documentation for Design

CWE-304 Missing Critical Step in Authentication

CWE-307 Improper Restriction of Excessive Authentication Attempts

HighCWE-116 Improper Encoding or Escaping of Output

CWE-284 Improper Access Control

HighCWE-330 Use of Insufficiently Random Values

CWE-615 Inclusion of Sensitive Information in Source Code Comments

Free online web security scanner

Don't show website scan report rating on the leaderboard