CVE-2025-7784

CVE-2025-7784 - Keycloak FGAPv2 Privilege Escalation This entry describes a privilege-escalation vulnerability in Keycloak when Fine-Grained Admin Permissions (FGAPv2) are enabled. An administrative user who holds the manage-users role can elevate themselves to realm-admin due to improper privile...

CVE-2024-10029

In Eclipse GlassFish version 7.0.15 is possible to perform Reflected Cross-site scripting attacks in the Administration Console...

CVE-2024-9343

In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console...

Malicious code in marcom-ac-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 64d378ac078f27f1f0357746b50307c933999c2eb82b5c9c7a7a6b0645910749 The OpenSSF Package Analysis project identified 'marcom-ac-console' @ 1.0.5 npm as malicious. It is considered malicious because: - The package...

CVE-2025-53885

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, when using Directus Flows to handle CRUD events for users it is possible to log the incoming data to console using the "Log to Console" operation and a template...

org.glassfish.main.admingui:console-cluster-plugin (5.0), org.glassfish.main.admingui:console-common-full-plugin (5.0) +8 more potentially affected by CVE-2024-9408 via org.glassfish.main.admingui:console-common (5.0)

org.glassfish.main.admingui:console-common MAVEN version 5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 5.0 -...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via specific endpoints. An attacker can make the system initiate arbitrary network requests to internal or external resources by sending crafted requests to these endpoints. Remediation There is no fixed...

org.glassfish.main.admingui:console-cluster-plugin (4.0-b72), org.glassfish.main.admingui:console-common-full-plugin (4.0-b72) +8 more potentially affected by CVE-2024-9408 via org.glassfish.main.admingui:console-common (4.0-b72)

org.glassfish.main.admingui:console-common MAVEN version 4.0-b72 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 4.0-b72 -...

org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=9.0.0-m3), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3) +16 more potentially affected by CVE-2024-9408 via org.glassfish.main.admingui:console-common (>=3.1.2, <=9.0.0-m3)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =7.1.1, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =9.0.0-m3 and more Source cves: CVE-2024-9408 Source advisory:...

org.glassfish.main.admingui:console-cluster-plugin (5.0.1), org.glassfish.main.admingui:console-common-full-plugin (5.0.1) +9 more potentially affected by CVE-2024-9408 via org.glassfish.main.admingui:console-common (5.0.1)

org.glassfish.main.admingui:console-common MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 5.0.1 -...

org.glassfish.main.admingui:console-cluster-plugin (3.1.2.2), org.glassfish.main.admingui:console-common-full-plugin (3.1.2.2) +6 more potentially affected by CVE-2024-9408 via org.glassfish.main.admingui:console-common (3.1.2.2)

org.glassfish.main.admingui:console-common MAVEN version 3.1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 3.1.2.2 -...

org.glassfish.main.admingui:console-cluster-plugin (5.1.0-rc1), org.glassfish.main.admingui:console-common-full-plugin (5.1.0-rc1) +7 more potentially affected by CVE-2024-10031 via org.glassfish.main.admingui:console-common (5.1.0-rc1)

org.glassfish.main.admingui:console-common MAVEN version 5.1.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 5.1.0-rc1 -...

org.glassfish.main.admingui:console-cluster-plugin (3.1.2), org.glassfish.main.admingui:console-common-full-plugin (3.1.2) +6 more potentially affected by CVE-2024-9343 via org.glassfish.main.admingui:console-common (3.1.2)

org.glassfish.main.admingui:console-common MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 3.1.2 -...

GHSA-62G9-99M7-W8WV Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console

In Eclipse GlassFish version 7.0.15, it is possible to perform Stored Cross-Site Scripting attacks through the Administration Console...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Administration Console. An attacker can execute arbitrary scripts in the context of a user's browser by injecting malicious payloads through user-controllable input fields. Details Cross-site scripting o...

org.glassfish.main.admingui:console-cluster-plugin (6.2.0), org.glassfish.main.admingui:console-common-full-plugin (6.2.0) +9 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (6.2.0)

org.glassfish.main.admingui:console-common MAVEN version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.2.0 -...

org.glassfish.main.admingui:console-cluster-plugin (3.1.2), org.glassfish.main.admingui:console-common-full-plugin (3.1.2) +6 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (3.1.2)

org.glassfish.main.admingui:console-common MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 3.1.2 -...

org.glassfish.main.admingui:console-cluster-plugin (5.0), org.glassfish.main.admingui:console-common-full-plugin (5.0) +8 more potentially affected by CVE-2024-9343 via org.glassfish.main.admingui:console-common (5.0)

org.glassfish.main.admingui:console-common MAVEN version 5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 5.0 -...

GHSA-MQXX-C43H-JJ9V Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console

In Eclipse GlassFish version 7.0.15, it is possible to perform Stored Cross-Site Scripting attacks through the Administration Console...

GHSA-VQRM-83G6-PFV4 Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console

In Eclipse GlassFish version 7.0.15, it is possible to perform Reflected Cross-Site Scripting attacks through the Administration Console...