org.keycloak:keycloak-account-api (1.0-rc-2), org.keycloak:keycloak-account-freemarker (1.0-rc-2) +48 more potentially affected by CVE-2017-2585 via org.keycloak:keycloak-core (1.0-rc-2)

org.keycloak:keycloak-core MAVEN version 1.0-rc-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.0-rc-2 - org.keycloak:keycloak-account-freemarker 1.0-rc-2 -...

Ekushey Project Manager CRM 3.1 Cross Site Scripting Vulnerability

Ekushey Project Manager CRM version 3.1 suffers from a persistent cross site scripting vulnerability. Exploit Title: Ekushey Project Manager CRM 3.1 - Cross-site Scripting Exploit Author: Ismail Tasdelen Vendor Homepage: http://creativeitem.com/ Software Link : http://creativeitem.com/demo/ekushe...

cn.home1:spring-cloud-eureka-server (>=0.0.1, <=1.0.1.u1), com.github.springcloud:moss-client-1.x (1.0.1.release) +162 more potentially affected by CVE-2018-1000130 via org.jolokia:jolokia-core (>=1.3.7, <=1.4.0)

org.jolokia:jolokia-core MAVEN version =1.3.7, =0.0.1, =1.2.0, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =v0.3.3, =v0.3.3, =2.0-beta-1, =2.3.0, =2.7.1 and more Source cves: CVE-2018-1000130 Source advisory: MEND:CVE-2018-1000130...

PT-2017-7984

Name of the Vulnerable Software and Affected Versions BlackBerry Enterprise Server 12 BES12 Self-Service versions prior to 12.4 Description The issue concerns SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet. Remote attackers can execute arbitrary SQL commands via t...