Dell EMC PowerStore authorization issue vulnerability

Dell PowerStore all-flash data storage appliances use a data-centric, highly adaptable and intelligent infrastructure to deliver AppsON capabilities that enable the transformation of traditional and modern workloads.Dell PowerStore is vulnerable to an authorization issue that could be exploited b...

CVE-2022-29452

Authenticated editor or higher user role Stored Cross-Site Scripting XSS vulnerability in Export All URLs plugin = 4.1 at WordPress...

com.vaadin:vaadin-platform-javadoc (>=14.8.5, <=14.8.9), io.devbench.uibuilder.components.util:common (>=2.1.3-dev-220411, <=2.1.3-dev-220924) +63 more potentially affected by CVE-2022-29567 via com.vaadin:vaadin (>=14.8.5, <=14.8.9)

com.vaadin:vaadin MAVEN version =14.8.5, =14.8.5, =2.1.3-dev-220411, =2.1.3-dev-220411, =2.1.3-dev-220411, =2.1.3-dev-220411, =2.1.3-dev-220411, =2.1.3-dev-220411, =2.1.3-dev-220411, =2.1.3-dev-220411, =2.1.3-dev-220411, =2.1.3-dev-220411, =2.1.3-dev-220411, =2.1.3-dev-220411, =2.1.3-dev-220924 -...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.2) potentially affected by CVE-2021-33322 via com.liferay.portal:com.liferay.portal.impl (3.26.4)

com.liferay.portal:com.liferay.portal.impl MAVEN version 3.26.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: -...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.4) potentially affected by CVE-2021-33322 via com.liferay.portal:com.liferay.portal.impl (4.12.11)

com.liferay.portal:com.liferay.portal.impl MAVEN version 4.12.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: -...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.2.0) potentially affected by CVE-2021-33322 via com.liferay.portal:com.liferay.portal.impl (5.1.6)

com.liferay.portal:com.liferay.portal.impl MAVEN version 5.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-suppo...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.0) potentially affected by CVE-2021-33322 via com.liferay.portal:com.liferay.portal.impl (3.0.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-suppo...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.1) potentially affected by CVE-2021-33322 via com.liferay.portal:com.liferay.portal.impl (3.22.20)

com.liferay.portal:com.liferay.portal.impl MAVEN version 3.22.20 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: -...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.2.0) potentially affected by CVE-2021-33322 via com.liferay.portal:com.liferay.portal.impl (5.1.6)

com.liferay.portal:com.liferay.portal.impl MAVEN version 5.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-suppo...

io.apiman:apiman-deployment (>=1.5.6.final, <=1.5.7.final), io.apiman:apiman-distro-eap7 (>=1.3.1.final, <=1.5.7.final) +20 more potentially affected by CVE-2019-10169 via org.keycloak:keycloak-authz-client (2.5.5.final)

org.keycloak:keycloak-authz-client MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-authz-client and may be impacted: - io.apiman:apiman-deployment =1.5.6.final, =1.3.1.final, =1.3.1.final, =1.3.1.final,...

CVE-2021-3717

A flaw was found in Wildfly. An incorrect JBOSSLOCALUSER challenge location when using the elytron configuration may lead to JBOSSLOCALUSER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability. This flaw affects...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.0) potentially affected by CVE-2021-33321 via com.liferay.portal:com.liferay.portal.impl (3.0.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-suppo...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (>=1.2.0, <=1.2.1) potentially affected by CVE-2021-33321 via com.liferay.portal:com.liferay.portal.impl (>=5.1.6, <=5.9.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version =5.1.6, =1.2.0, =1.2.1 Source cves: CVE-2021-33321 Source advisory: OSV:GHSA-JFCH-M2X3-2V66...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.1) potentially affected by CVE-2021-33321 via com.liferay.portal:com.liferay.portal.impl (3.22.20)

com.liferay.portal:com.liferay.portal.impl MAVEN version 3.22.20 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: -...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.2) potentially affected by CVE-2021-33321 via com.liferay.portal:com.liferay.portal.impl (3.26.4)

com.liferay.portal:com.liferay.portal.impl MAVEN version 3.26.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: -...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.3) potentially affected by CVE-2021-33321 via com.liferay.portal:com.liferay.portal.impl (4.3.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-suppo...

org.hawkular.accounts:hawkular-accounts (>=2.0.23.final, <=2.0.39.final), org.hawkular.accounts:hawkular-accounts-api (>=2.0.23.final, <=2.0.39.final) +53 more potentially affected by CVE-2020-27838 via org.keycloak:keycloak-core (1.9.1.final)

org.keycloak:keycloak-core MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.hawkular.accounts:hawkular-accounts =2.0.23.final, =2.0.23.final, =2.0.23.final, =2.0.23.final,...

org.keycloak:keycloak-adapter-core (3.3.0.final), org.keycloak:keycloak-admin-client (3.3.0.final) +57 more potentially affected by CVE-2020-27838 via org.keycloak:keycloak-core (3.3.0.final)

org.keycloak:keycloak-core MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.3.0.final - org.keycloak:keycloak-admin-client 3.3.0.final -...

org.keycloak.example.demo:product-portal-fuse-example (1.1.1.final), org.keycloak:keycloak-account-api (1.1.1.final) +66 more potentially affected by CVE-2020-27838 via org.keycloak:keycloak-core (1.1.1.final)

org.keycloak:keycloak-core MAVEN version 1.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak.example.demo:product-portal-fuse-example 1.1.1.final - org.keycloak:keycloak-account-api...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.3), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.3) +51 more potentially affected by CVE-2020-27838 via org.keycloak:keycloak-core (1.0.5.final)

org.keycloak:keycloak-core MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.3 -...