org.wildfly.core:wildfly-deployment-scanner (1.0.0.alpha17), org.wildfly.core:wildfly-jmx (1.0.0.alpha17) +5 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.0.alpha17)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.alpha17 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.alpha17 - org.wildfly.core:wildfly-jmx...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.alpha18), org.wildfly.core:wildfly-jmx (1.0.0.alpha18) +5 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.0.alpha18)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.alpha18 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.alpha18 - org.wildfly.core:wildfly-jmx...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.alpha19), org.wildfly.core:wildfly-jmx (1.0.0.alpha19) +5 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (1.0.0.alpha19)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.alpha19 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.alpha19 - org.wildfly.core:wildfly-jmx...

Clickjacking Vulnerability in JP1/ServerConductor/Deployment Manager

Overview A Clickjacking Vulnerability was found in JP1/ServerConductor/Deployment Manager. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...

Security Bulletin: IBM SPSS Collaboration and Deployment Services is vulnerable to server-side request forgery (CVE-2024-22329)

Summary IBM WebSphere Application Server Liberty that is embedded in IBM SPSS Collaboration and Deployment Services is vulnerable to server-side request forgery Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected...

Security Bulletin: IBM SPSS Collaboration and Deployment Services is vulnerable to a denial of service attack originating in IBM WebSphere Application Server Liberty (CVE-2024-25026)

Summary IBM WebSphere Application Server Liberty that is embedded in IBM SPSS Collaboration and Deployment Services is vulnerable to a denial of service. This vulnerability is addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Product...

Security Bulletin: BM SPSS Collaboration and Deployment Services is vulnerable to an XML External Entity (XXE) injection vulnerability (CVE-2024-22354)

Summary IBM WebSphere Application Server Liberty that is embedded in IBM SPSS Collaboration and Deployment Services is vulnerable to an XML External Entity XXE injection vulnerability Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products a...

openjdk: Enhance array handling (Oracle CPU 2025-01)

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to Oracle Java SE accessible. This vulnerability can be...

JetBrains YouTrack 日志信息泄露漏洞

JetBrains YouTrack is a project management tool developed by JetBrains that supports cloud hosting and local deployment. JetBrains YouTrack suffers from a log information disclosure vulnerability that stems from the fact that persistent tokens can be exposed in logs. An attacker can exploit this...

Description of the security update for Office 2016: January 14, 2025 (KB5002595)

None None...

Description of the security update for SharePoint Server 2019: January 14, 2025 (KB5002666)

None None...

org.keycloak:keycloak-guides (17.0.0), org.keycloak:keycloak-guides-maven-plugin (17.0.0) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (17.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 17.0.0 - org.keycloak:keycloak-guides-maven-plugin 17.0.0...

org.keycloak:keycloak-guides (17.0.1), org.keycloak:keycloak-guides-maven-plugin (17.0.1) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (17.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 17.0.1 - org.keycloak:keycloak-guides-maven-plugin 17.0.1...

org.keycloak:keycloak-guides (19.0.0), org.keycloak:keycloak-guides-maven-plugin (19.0.0) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (19.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 19.0.0 - org.keycloak:keycloak-guides-maven-plugin 19.0.0...

org.keycloak:keycloak-guides (20.0.2), org.keycloak:keycloak-guides-maven-plugin (20.0.2) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (20.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.2 - org.keycloak:keycloak-guides-maven-plugin 20.0.2...

org.keycloak:keycloak-guides (20.0.4), org.keycloak:keycloak-guides-maven-plugin (20.0.4) +2 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (20.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.4 - org.keycloak:keycloak-guides-maven-plugin 20.0.4...

org.keycloak:keycloak-guides (20.0.5), org.keycloak:keycloak-guides-maven-plugin (20.0.5) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (20.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.5 - org.keycloak:keycloak-guides-maven-plugin 20.0.5...

org.keycloak:keycloak-guides (24.0.5), org.keycloak:keycloak-guides-maven-plugin (24.0.5) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (24.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.5 - org.keycloak:keycloak-guides-maven-plugin 24.0.5...

org.keycloak:keycloak-guides (25.0.3), org.keycloak:keycloak-guides-maven-plugin (25.0.3) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (25.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 25.0.3 - org.keycloak:keycloak-guides-maven-plugin 25.0.3...

org.keycloak:keycloak-guides (21.0.2), org.keycloak:keycloak-guides-maven-plugin (21.0.2) +3 more potentially affected by CVE-2024-11734 via org.keycloak:keycloak-quarkus-server (21.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 21.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 21.0.2 - org.keycloak:keycloak-guides-maven-plugin 21.0.2...