EUVD-2026-4028

Missing Authorization vulnerability in Taxcloud TaxCloud for WooCommerce simple-sales-tax allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TaxCloud for WooCommerce: from n/a through = 8.3.8...

MiracleLinux 9 : thunderbird-91.11.0-2.el9.ML.1 (AXSA:2022-4028:19)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-4028:19 advisory. Mozilla: CSP sandbox header without allow-scripts can be bypassed via retargeted javascript: URI CVE-2022-34468 Mozilla: Use-after-free in nsSHistor...

MiracleLinux 3 : xorg-x11-server-1.1.1-48.90.0.1.AXS3 (AXSA:2012-271:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-271:01 advisory. X.Org X11 X server Security issues fixed with this release: CVE-2011-4028 No information available at the time of writing, please refer to the CVE links below...

CVE-2012-4028

Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication...

CVE-2025-4028

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched...

CVE-2025-4028 PHPGurukul COVID19 Testing Management System profile.php sql injection

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched...

CVE-2025-4028

CVE-2025-4028 affects PHPGurukul COVID19 Testing Management System 1.0. The vulnerability resides in /profile.php where the mobilenumber parameter is manipulated to cause SQL injection. The issue can be triggered remotely and has been disclosed publicly, with other parameters potentially affected...

CVE-2025-4028 PHPGurukul COVID19 Testing Management System profile.php sql injection

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched...

Linux Distros Unpatched Vulnerability : CVE-2021-4028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a...

Linux Distros Unpatched Vulnerability : CVE-2011-4028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a...

org.hawkular.accounts:hawkular-accounts (>=2.0.7.final, <=2.0.10.final), org.hawkular.accounts:hawkular-accounts-api (>=2.0.7.final, <=2.0.10.final) +91 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.8.0.alpha1)

org.keycloak:keycloak-core MAVEN version 1.8.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.hawkular.accounts:hawkular-accounts =2.0.7.final, =2.0.7.final, =2.0.7.final, =2.0.7.final,...

com.blazebit:blaze-storage-client-keycloak (>=0.2.0, <=0.3.3), com.blazebit:blaze-storage-modules-authentication-keycloak (>=0.2.0, <=0.3.3) +77 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.1.0.final)

org.keycloak:keycloak-core MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.blazebit:blaze-storage-client-keycloak =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.16.1, =1.1.0.rc3,...

org.keycloak:keycloak-account-api (1.0-beta-1-20150521), org.keycloak:keycloak-account-freemarker (1.0-beta-1-20150521) +36 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.0-beta-1-20150521)

org.keycloak:keycloak-core MAVEN version 1.0-beta-1-20150521 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.0-beta-1-20150521 -...

io.github.project-openubl:xbuilder-server-war (>=1.2.1.final, <=1.2.2.final), io.github.project-openubl:xbuilder-server-x (>=1.2.1.final, <=1.2.2.final) +61 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (11.0.1)

org.keycloak:keycloak-core MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.project-openubl:xbuilder-server-war =1.2.1.final, =1.2.1.final, =1.8.0.cr1, =1.8.0.cr1,...

io.apiman:apiman-manager-api-security (>=1.1.4.final, <=1.2.0.final), io.apiman:apiman-manager-ui-hawtio-wildfly8 (>=1.1.4.final, <=1.2.0.final) +148 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.2.0.final)

org.keycloak:keycloak-core MAVEN version 1.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman:apiman-manager-api-security =1.1.4.final, =1.1.4.final, =0.23.0, =0.23.0, =0.23.0, =0.23.0,...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.7.3), io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (1.2.6.final) +55 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.9.4.final)

org.keycloak:keycloak-core MAVEN version 1.9.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.7.3 -...

de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (>=2.3.4, <=2.8.1), de.fraunhofer.iosb.ilt.frost-server:frost-server.http (>=2.3.4, <=2.8.0) +78 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (25.0.3)

org.keycloak:keycloak-core MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak =2.3.4, =2.3.4, =2.4.0, =2.3.4, =2.3.4,...

org.eclipse.dirigible:dirigible-server-spring (7.1.5), org.eclipse.dirigible:dirigible-spring-services (7.1.5) +51 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (20.0.4)

org.keycloak:keycloak-core MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.eclipse.dirigible:dirigible-server-spring 7.1.5 - org.eclipse.dirigible:dirigible-spring-services 7.1....

io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.2.4.final, <=1.2.6.beta1), io.apiman:apiman-distro-eap7 (>=1.2.4.final, <=1.2.6.beta1) +48 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.9.2.final)

org.keycloak:keycloak-core MAVEN version 1.9.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =1.2.4.final, =1.2.4.final, =1.2.4.final,...

de.adorsys.sts:keycloak-storage-provider (>=0.29.1, <=0.29.10), de.retest:recheck (>=1.2.0-beta.1, <=1.4.0) +83 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (6.0.1)

org.keycloak:keycloak-core MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.adorsys.sts:keycloak-storage-provider =0.29.1, =1.2.0-beta.1, =1.3.0-beta.1, =0.0.7, =0.0.7, =0.0.6,...