org.apereo.cas:cas-server-core-configuration-cloud-vault (5.2.0-rc1) potentially affected by CVE-2023-20859 via org.springframework.vault:spring-vault-core (1.0.1.release)

org.springframework.vault:spring-vault-core MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.vault:spring-vault-core and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-vault 5.2.0-rc...

CVE-2023-28725: Unrestricted Upload of File with Dangerous Type

General Bytes Crypto Application Server CAS 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March...

CVE-2023-28725

The General Bytes Crypto Application Server (CAS) version 20230120, distributed with BATM devices , contains a vulnerability (BATM-4780) that allows remote attackers to execute arbitrary Java code . The root cause is the unrestricted upload of Java applications to the /batm/app/admin/standalone/d...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

io.github.johnjcool:keycloak-cas-services (>=4.1.0.final, <=4.1.1.final), org.keycloak:keycloak-dependencies-server-min (4.1.0.final) +3 more potentially affected by CVE-2023-0264 via org.keycloak:keycloak-services (4.1.0.final)

org.keycloak:keycloak-services MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.1.0.final, =4.1.1.final -...

io.github.johnjcool:keycloak-cas-services (4.5.0.final), org.keycloak:keycloak-dependencies-server-min (4.5.0.final) +3 more potentially affected by CVE-2023-0264 via org.keycloak:keycloak-services (4.5.0.final)

org.keycloak:keycloak-services MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final -...

io.github.johnjcool:keycloak-cas-services (4.4.0.final), org.keycloak:keycloak-dependencies-server-min (4.4.0.final) +3 more potentially affected by CVE-2022-1274 via org.keycloak:keycloak-services (4.4.0.final)

org.keycloak:keycloak-services MAVEN version 4.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.4.0.final -...

io.github.johnjcool:keycloak-cas-services (>=4.3.0.final, <=4.3.1.final), org.keycloak:keycloak-dependencies-server-min (4.3.0.final) +3 more potentially affected by CVE-2022-1274 via org.keycloak:keycloak-services (4.3.0.final)

org.keycloak:keycloak-services MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.3.0.final, =4.3.1.final -...

io.github.johnjcool:keycloak-cas-services (>=4.1.0.final, <=4.1.1.final), org.keycloak:keycloak-dependencies-server-min (4.1.0.final) +3 more potentially affected by CVE-2022-1274 via org.keycloak:keycloak-services (4.1.0.final)

org.keycloak:keycloak-services MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.1.0.final, =4.1.1.final -...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-dependencies-server-min (4.2.0.final) +3 more potentially affected by CVE-2022-1274 via org.keycloak:keycloak-services (4.2.0.final)

org.keycloak:keycloak-services MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

io.github.johnjcool:keycloak-cas-services (4.5.0.final), org.keycloak:keycloak-dependencies-server-min (4.5.0.final) +3 more potentially affected by CVE-2022-1438 via org.keycloak:keycloak-services (4.5.0.final)

org.keycloak:keycloak-services MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final -...

io.github.johnjcool:keycloak-cas-services (>=4.1.0.final, <=4.1.1.final), org.keycloak:keycloak-dependencies-server-min (4.1.0.final) +3 more potentially affected by CVE-2022-1438 via org.keycloak:keycloak-services (4.1.0.final)

org.keycloak:keycloak-services MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.1.0.final, =4.1.1.final -...

K15623: GnuTLS vulnerability CVE-2009-5138

Security Advisory Description GnuTLS before 2.7.6, when the GNUTLSVERIFYALLOWX509V1CACRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new...

com.atomgraph:linkeddatahub (>=4.0.0, <=5.4.0), org.apache.tomcat:tomcat-catalina (>=10.1.0-m1, <=10.1.4) +6 more potentially affected by CVE-2023-24998 via org.apache.tomcat:tomcat-coyote (>=10.1.0-m1, <=10.1.4)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.0-m1, =4.0.0, =10.1.0-m1, =10.1.0-m1, =10.1.0-m1, =17.0.0.final, =17.0.0.final, =17.0.1.final Source cves: CVE-2023-24998 Source advisory: GHSA-HFRX-6QGJ-FP6C...

CVE-2022-29523

Improper conditions check in the Open CAS software maintained by IntelR before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-29523

Improper conditions check in the Open CAS software maintained by IntelR before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access...

Design/Logic Flaw

Improper conditions check in the Open CAS software maintained by IntelR before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-29523

Improper conditions check in the Open CAS software maintained by IntelR before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access...