9 matches found
ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-16106 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)
org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-16106 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752075...
CVE-2019-16106
The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user via the recruitmentonline/personalData/actacounttab.cfm txtNewUserName and hdNP fields...
CVE-2020-16106
CVE-2020-16106 entry is rejected/not used per the description.
CVE-2019-16106
The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user via the recruitmentonline/personalData/actacounttab.cfm txtNewUserName and hdNP fields...
CVE-2019-16106
The CVE-2019-16106 entry affects the Recruitment module of Humanica Humatrix versions 7 1.0.0.203 and 1.0.0.681. An unauthenticated attacker can change a user’s password via the recruitment_online/personalData/act_acounttab.cfm parameters txtNewUserName and hdNP, enabling account compromise. The ...
CVE-2017-16106
CVE-2017-16106 : The static file server tmock is vulnerable to a directory traversal via URLs containing ".. /", allowing access to the filesystem (e.g., reading /etc/passwd). Several connected advisories confirm this issue and indicate there is no patch available ; the guidance is to restrict tm...