ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.avast.grpc.jwt:grpc-java-jwt-keycloak (>=0.5.16, <=0.5.17) +86 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (25.0.6)

org.keycloak:keycloak-core MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - ch.iterial.keycloak.plugins:keycloak-directus-plugin =0.1.0, =0.5.16, =0.3.27, =4.0.3-25.0, =4.0.3-25.0,...

org.keycloak:keycloak-account-api (1.5.1.final), org.keycloak:keycloak-account-freemarker (1.5.1.final) +89 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.5.1.final)

org.keycloak:keycloak-core MAVEN version 1.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.5.1.final - org.keycloak:keycloak-account-freemarker 1.5.1.final ...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=3.0.1-25.0, <=4.0.1-25.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0) +49 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (25.0.1)

org.keycloak:keycloak-core MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =3.0.1-25.0, =3.0.1-25.0, =4.0.1-25.0 -...

de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (>=2.3.4, <=2.8.1), de.fraunhofer.iosb.ilt.frost-server:frost-server.http (>=2.3.4, <=2.8.0) +78 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (25.0.3)

org.keycloak:keycloak-core MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak =2.3.4, =2.3.4, =2.4.0, =2.3.4, =2.3.4,...

io.github.project-openubl:xbuilder-server-war (>=1.2.1.final, <=1.2.2.final), io.github.project-openubl:xbuilder-server-x (>=1.2.1.final, <=1.2.2.final) +61 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (11.0.1)

org.keycloak:keycloak-core MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.project-openubl:xbuilder-server-war =1.2.1.final, =1.2.1.final, =1.8.0.cr1, =1.8.0.cr1,...

org.hawkular.accounts:hawkular-accounts (>=2.0.7.final, <=2.0.10.final), org.hawkular.accounts:hawkular-accounts-api (>=2.0.7.final, <=2.0.10.final) +91 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.8.0.alpha1)

org.keycloak:keycloak-core MAVEN version 1.8.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.hawkular.accounts:hawkular-accounts =2.0.7.final, =2.0.7.final, =2.0.7.final, =2.0.7.final,...

com.jalalkiswani:smart-cloud-web (>=3.0.0, <=4.0.8), com.jalalkiswani:smart-cloud-web-security (>=4.0.1, <=4.0.8) +79 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (5.0.0)

org.keycloak:keycloak-core MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.jalalkiswani:smart-cloud-web =3.0.0, =4.0.1, =4.0.1, =1.1.0, =0.0.4, =0.0.4, =5.1.0, =5.1.2 -...

io.gravitee.resource:gravitee-resource-oauth2-provider-keycloak (>=1.2.0, <=1.8.0), org.activiti.cloud.audit:activiti-cloud-starter-audit (>=7.0.0.rc2, <=7.1.0.m4) +78 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (4.6.0.final)

org.keycloak:keycloak-core MAVEN version 4.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.gravitee.resource:gravitee-resource-oauth2-provider-keycloak =1.2.0, =7.0.0.rc2, =7.0.0.rc2,...

CVE-2024-4028

creationtimestamp| type| source ---|---|--- 2025-02-18 18:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihul5aitt2o 2025-02-18 20:59:52+00:00| seen| https://t.me/cvedetector/18354 2025-03-15 04:45:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7664...

CVE-2024-4028 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-config-cli...

CVE-2024-4028 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, keycloak...

CentOS 7 : kernel (RHSA-2022:1198)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1198 advisory. - A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to...

CentOS 7 : kpatch-patch (RHSA-2022:1185)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1185 advisory. - A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to...

CVE-2023-4028

creationtimestamp| type| source ---|---|--- 2023-08-17 20:37:35+00:00| seen| https://t.me/cibsecurity/68772...

CVE-2023-4028

Affected software/hardware: Lenovo Notebook family. Issue: a buffer overflow in the SystemUserMasterHddPwdDxe driver. Root cause: overflow vulnerability in specific Lenovo notebook driver components that can be triggered locally. Impact: allows an attacker with local access and elevated privilege...

Tridium Niagara AX Insufficiently Protected Credentials (CVE-2012-4028)

Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-o...

K37256400: Linux kernel vulnerability CVE-2021-4028

Security Advisory Description A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local...

CVE-2022-4028

The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during the profile-save action when modifying a profile signature in versions up to, and including, 6.8 due to insufficient input sanitization and output escaping that makes...

CVE-2022-4028 Simple:Press <= 6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Signatures

The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during the profile-save action when modifying a profile signature in versions up to, and including, 6.8 due to insufficient input sanitization and output escaping that makes...

CVE-2022-4028

The CVE-2022-4028 describes a Stored XSS vulnerability in the WordPress Simple:Press plugin (up to and including version 6.8) triggered by the postitem parameter during profile-signature modification. Root cause: insufficient input sanitization and output escaping enables injection of object/embe...