org.keycloak:keycloak-guides (20.0.3), org.keycloak:keycloak-guides-maven-plugin (20.0.3) +3 more potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (20.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.3 - org.keycloak:keycloak-guides-maven-plugin 20.0.3...

org.keycloak:keycloak-guides (21.0.0), org.keycloak:keycloak-guides-maven-plugin (21.0.0) +3 more potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (21.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 21.0.0 - org.keycloak:keycloak-guides-maven-plugin 21.0.0...

org.keycloak:keycloak-guides (22.0.1), org.keycloak:keycloak-guides-maven-plugin (22.0.1) +3 more potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (22.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 22.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 22.0.1 - org.keycloak:keycloak-guides-maven-plugin 22.0.1...

org.keycloak:keycloak-guides (23.0.1), org.keycloak:keycloak-guides-maven-plugin (23.0.1) +3 more potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (23.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.1 - org.keycloak:keycloak-guides-maven-plugin 23.0.1...

org.keycloak:keycloak-guides (23.0.2), org.keycloak:keycloak-guides-maven-plugin (23.0.2) +3 more potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (23.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.2 - org.keycloak:keycloak-guides-maven-plugin 23.0.2...

org.keycloak:keycloak-guides (24.0.0), org.keycloak:keycloak-guides-maven-plugin (24.0.0) +3 more potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (24.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.0 - org.keycloak:keycloak-guides-maven-plugin 24.0.0...

org.keycloak:keycloak-guides (24.0.4), org.keycloak:keycloak-guides-maven-plugin (24.0.4) +3 more potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (24.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.4 - org.keycloak:keycloak-guides-maven-plugin 24.0.4...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.5-25.0), org.keycloak:keycloak-guides (>=25.0.0, <=26.0.5) +6 more potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (>=25.0.0, <=26.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version =25.0.0, =3.0.1-25.0, =25.0.0, =25.0.0, =25.0.0, =26.0.0, =25.0.0, =25.0.0, =26.0.0, =26.0.5 Source cves: CVE-2024-10451 Source advisory: MEND:CVE-2024-10451...

CVE-2024-7056

The WPForms WordPress plugin before 1.9.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Exploit for Code Injection in Rejetto Http_File_Server

CVE-2024-23692-poc CVE-2024-23692 is a template injection vu...

Exploit for Incorrect Authorization in Apache Ofbiz

cveCVE-2024-38856-poc CVE-2024-38856 is a serious vulnerabil...

Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in IBM Semeru Runtime

Summary The IBM SPSS Collaboration and Deployment Services using IBM SDK, Java Technology Edition Quarterly CPU - Apr 2023 - Includes Oracle April 2023 CPU is vulnerable to CVE-2023-2597. These vulnerabilities are addressed. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in IBM Semeru Runtime

Summary The IBM SPSS Collaboration and Deployment Services using IBM Semeru Runtime Quarterly CPU - Jan 2024 - Includes OpenJDK Jan 2024 CPU plus CVE-2024-22361. These vulnerabilities are addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in IBM Semeru Runtime

Summary The IBM SPSS Collaboration and Deployment Services using BM SDK, Java Technology Edition Quarterly CPU - Jan 2024 -Includes Oracle July 2024 CPU plus CVE-2024-27267. These vulnerabilities are addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in IBM Semeru Runtime

Summary The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in IBM Semeru Runtime Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- SPSS...

upKeeper 安全漏洞

upKeeper is a cloud-based or local solution from upKeeper Inc. A security vulnerability exists in upKeeper versions prior to 1.2, which stems from the presence of an incorrect privilege management vulnerability that allows privilege escalation...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.5 security update

Red Hat OpenShift Container Platform release 4.17.5 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

CVE-2024-0012

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege...

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege...

CVE-2024-0012

CVE-2024-0012 is an authentication bypass in Palo Alto Networks PAN-OS management web interface that lets an unauthenticated, network-reachable attacker gain PAN-OS administrator privileges. Affected products/versions: PAN-OS 10.2, 11.0, 11.1, and 11.2; Cloud NGFW and Prisma Access are not impact...