99 matches found
CVE-2020-10039
A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker in a privileged network position between a legitimate user and the web server might be able to conduct a Man-in-the-middle attack and gain read and write access to...
CVE-2025-10039 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client'
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.9 via the 'ehcrmticketsingleviewclient' due to missing validation on a user controlled key. This makes it possible for...
CVE-2011-10039
creationtimestamp| type| source ---|---|--- 2025-10-30 21:52:57+00:00| seen| Telegram/mpKYWzWGHH-XvzOcsCuQ0bJ-kVEBraUrU1BwGv0BBfAWBRQ...
CVE-2012-10039
ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog parameter is passed directly into a backtick-delimited exec call without sanitation. An authenticated attacker can inject arbitrary shell commands, resulting in remote code executio...
CVE-2015-10039
A vulnerability was found in dobos domino. It has been rated as critical. Affected by this issue is some unknown functionality in the library src/Complex.Domino.Lib/Lib/EntityFactory.cs. The manipulation leads to sql injection. Upgrading to version 0.1.5524.38553 is able to address this issue. Th...
CVE-2019-10039
The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use an API URL /goform/setSysAdm to edit the web or system account without authentication...
org.keycloak:keycloak-adapter-core (1.0-alpha-1), org.keycloak:keycloak-core-jaxrs (1.0-alpha-1) +7 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (1.0-alpha-1)
org.keycloak:keycloak-core MAVEN version 1.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 1.0-alpha-1 - org.keycloak:keycloak-core-jaxrs 1.0-alpha-1 -...
org.keycloak:keycloak-adapter-core (3.3.0.cr2), org.keycloak:keycloak-admin-client (3.3.0.cr2) +56 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (3.3.0.cr2)
org.keycloak:keycloak-core MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.3.0.cr2 - org.keycloak:keycloak-admin-client 3.3.0.cr2 -...
org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.1), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.1) +50 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (1.0-final)
org.keycloak:keycloak-core MAVEN version 1.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.1 -...
org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.final), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.0.final) +50 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (1.0-rc-1)
org.keycloak:keycloak-core MAVEN version 1.0-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.final -...
eu.limetri.ygg:ygg-client (0.12), eu.limetri.ygg:ygg-client-installed (>=0.13, <=0.16) +56 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (1.0.4.final)
org.keycloak:keycloak-core MAVEN version 1.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - eu.limetri.ygg:ygg-client 0.12 - eu.limetri.ygg:ygg-client-installed =0.13, =1.0.2, =1.0.2, =1.0.2,...
com.github.dasniko:testcontainers-keycloak (2.4.0), com.manydesigns:demo-tt (5.3.4) +66 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (20.0.0)
org.keycloak:keycloak-core MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.dasniko:testcontainers-keycloak 2.4.0 - com.manydesigns:demo-tt 5.3.4 -...
com.abavilla:fpi-bot-api (>=1.2.0, <=1.5.0), com.abavilla:fpi-bot-api-core (>=1.2.0, <=1.3.1) +138 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (19.0.3)
org.keycloak:keycloak-core MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.abavilla:fpi-bot-api =1.2.0, =1.2.0, =1.2.0, =1.3.2, =1.5.0, =1.5.0, =1.2.1, =1.2.1, =1.2.1, =1.3.2,...
com.c4-soft.springaddons:spring-addons-keycloak (>=5.4.0, <=5.4.2), com.markstickel.keycloak:keycloak-kafka-publisher-event-listener-provider (1.0.0) +74 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (19.0.2)
org.keycloak:keycloak-core MAVEN version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.c4-soft.springaddons:spring-addons-keycloak =5.4.0, =0.8.0, =0.8.0, =0.1.49, =1.0.0, =1.0.0, =6.3.22,...
be.jidoka:jdk-keycloak-admin (1.3.0), com.abavilla:fpi-framework-core (>=1.1.13, <=1.1.19) +98 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (19.0.1)
org.keycloak:keycloak-core MAVEN version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - be.jidoka:jdk-keycloak-admin 1.3.0 - com.abavilla:fpi-framework-core =1.1.13, =1.1.13, =5.1.1-jdk1.8,...
br.com.anteros:anteros-keycloak (1.0.0), city.smartb.i2:i2-client-f2-command (>=0.12.0, <=0.16.0) +194 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (18.0.2)
org.keycloak:keycloak-core MAVEN version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - br.com.anteros:anteros-keycloak 1.0.0 - city.smartb.i2:i2-client-f2-command =0.12.0, =0.11.0, =0.11.0,...
com.github.vzakharchenko:chillispot-radius-plugin (1.4.5), com.github.vzakharchenko:cisco-radius-plugin (1.4.5) +101 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (18.0.1)
org.keycloak:keycloak-core MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.5 - com.github.vzakharchenko:cisco-radius-plugin 1.4...
com.avast.grpc.jwt:grpc-java-jwt-keycloak (0.5.2), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +104 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (16.1.0)
org.keycloak:keycloak-core MAVEN version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.avast.grpc.jwt:grpc-java-jwt-keycloak 0.5.2 - com.c4-soft.springaddons:keycloak-grants-mapper...
cc.jstr:keycloak-authkit (>=1.0.0, <=1.0.1), com.avast.grpc.jwt:grpc-java-jwt-keycloak (0.5.1) +84 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (16.0.0)
org.keycloak:keycloak-core MAVEN version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - cc.jstr:keycloak-authkit =1.0.0, =1.0.1 - com.avast.grpc.jwt:grpc-java-jwt-keycloak 0.5.1 -...
com.github.vzakharchenko:chillispot-radius-plugin (1.3.15), com.github.vzakharchenko:cisco-radius-plugin (1.3.15) +86 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (15.1.0)
org.keycloak:keycloak-core MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.15 - com.github.vzakharchenko:cisco-radius-plugin...