org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.3), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.3) +51 more potentially affected by CVE-2017-2585 via org.keycloak:keycloak-core (1.0.5.final)

org.keycloak:keycloak-core MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.3 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.7.2), org.keycloak:keycloak-adapter-core (1.9.3.final) +43 more potentially affected by CVE-2017-2585 via org.keycloak:keycloak-core (1.9.3.final)

org.keycloak:keycloak-core MAVEN version 1.9.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.7.2 - org.keycloak:keycloak-adapter-core 1.9.3.fin...

org.hawkular.accounts:hawkular-accounts (>=2.0.23.final, <=2.0.39.final), org.hawkular.accounts:hawkular-accounts-api (>=2.0.23.final, <=2.0.39.final) +53 more potentially affected by CVE-2017-2585 via org.keycloak:keycloak-core (1.9.1.final)

org.keycloak:keycloak-core MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.hawkular.accounts:hawkular-accounts =2.0.23.final, =2.0.23.final, =2.0.23.final, =2.0.23.final,...

org.keycloak:keycloak-account-api (1.1.0.beta1), org.keycloak:keycloak-account-freemarker (1.1.0.beta1) +51 more potentially affected by CVE-2017-2585 via org.keycloak:keycloak-core (1.1.0.beta1)

org.keycloak:keycloak-core MAVEN version 1.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.1.0.beta1 - org.keycloak:keycloak-account-freemarker 1.1.0.beta1 ...

Ekushey Project Manager CRM 3.1 Cross Site Scripting Vulnerability

Ekushey Project Manager CRM version 3.1 suffers from a persistent cross site scripting vulnerability. Exploit Title: Ekushey Project Manager CRM 3.1 - Cross-site Scripting Exploit Author: Ismail Tasdelen Vendor Homepage: http://creativeitem.com/ Software Link : http://creativeitem.com/demo/ekushe...

cn.home1:spring-cloud-eureka-server (>=0.0.1, <=1.0.1.u1), com.github.springcloud:moss-client-1.x (1.0.1.release) +162 more potentially affected by CVE-2018-1000130 via org.jolokia:jolokia-core (>=1.3.7, <=1.4.0)

org.jolokia:jolokia-core MAVEN version =1.3.7, =0.0.1, =1.2.0, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =v0.3.3, =v0.3.3, =2.0-beta-1, =2.3.0, =2.7.1 and more Source cves: CVE-2018-1000130 Source advisory: MEND:CVE-2018-1000130...

PT-2017-7984

Name of the Vulnerable Software and Affected Versions BlackBerry Enterprise Server 12 BES12 Self-Service versions prior to 12.4 Description The issue concerns SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet. Remote attackers can execute arbitrary SQL commands via t...