Qos.ch Sarl

10 CVEs across 3 Qos.ch Sarl products. Browse Qos.ch Sarl vulnerabilities, severities, and proof-of-concept exploits.

Qos.ch Sarl products with known CVEs

ProductCVEs
Logback5
Logback-Core4
Logback-Classic1
Qos.ch Sarl CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-198802026-08-14Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an MDC-ba…
CVE-2026-130062026-06-24ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.36 in Java applications, allows an attac…
CVE-2026-105322026-06-01Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection…
CVE-2026-98282026-05-28Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection…
CVE-2026-12252026-01-22ACE vulnerability in configuration file processing by QOS.CH logback-core up to and including version 1.5.24 in Java applications, allows an attacker to insta…
CVE-2025-112262025-10-01ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attac…
CVE-2024-128012024-12-19Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 0.1 to 1.3.14 and 1.4.0 to 1.5.12  on the Java platform, allows an attacker to…
CVE-2024-127982024-12-19ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows …
CVE-2023-6481High7.12023-12-04A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service…
CVE-2023-6378High7.12023-11-29A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending…