22 matches found
CVE-2026-5328
A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/ProductIndexServiceImpl.java of the component ProductItemDao Interface. Executing...
EUVD-2026-18214
A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/ProductIndexServiceImpl.java of the component ProductItemDao Interface. Executing...
CVE-2026-5328
A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/ProductIndexServiceImpl.java of the component ProductItemDao Interface. Executing...
CVE-2026-5328 shsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injection
A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/ProductIndexServiceImpl.java of the component ProductItemDao Interface. Executing...
CVE-2026-5328
A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/ProductIndexServiceImpl.java of the component ProductItemDao Interface. Executing...
CVE-2026-5328 shsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injection
A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/ProductIndexServiceImpl.java of the component ProductItemDao Interface. Executing...
EUVD-2022-35624
Malicious code in bioql PyPI...
io.quarkus:quarkus-keycloak-admin-client (1.4.1.final), io.quarkus:quarkus-keycloak-admin-client-deployment (1.4.1.final) +6 more potentially affected by CVE-2023-1584 via io.quarkus:quarkus-oidc (1.4.1.final)
io.quarkus:quarkus-oidc MAVEN version 1.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-oidc and may be impacted: - io.quarkus:quarkus-keycloak-admin-client 1.4.1.final - io.quarkus:quarkus-keycloak-admin-client-deployment...
io.quarkus:quarkus-keycloak-authorization (1.0.1.final), io.quarkus:quarkus-keycloak-authorization-deployment (1.0.1.final) +2 more potentially affected by CVE-2023-1584 via io.quarkus:quarkus-oidc (1.0.1.final)
io.quarkus:quarkus-oidc MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-oidc and may be impacted: - io.quarkus:quarkus-keycloak-authorization 1.0.1.final - io.quarkus:quarkus-keycloak-authorization-deploymen...
io.quarkus:quarkus-keycloak-authorization (1.1.0.final), io.quarkus:quarkus-keycloak-authorization-deployment (1.1.0.final) +2 more potentially affected by CVE-2023-1584 via io.quarkus:quarkus-oidc (1.1.0.final)
io.quarkus:quarkus-oidc MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-oidc and may be impacted: - io.quarkus:quarkus-keycloak-authorization 1.1.0.final - io.quarkus:quarkus-keycloak-authorization-deploymen...
io.quarkus:quarkus-keycloak-authorization (1.3.1.final), io.quarkus:quarkus-keycloak-authorization-deployment (1.3.1.final) +3 more potentially affected by CVE-2023-1584 via io.quarkus:quarkus-oidc (1.3.1.final)
io.quarkus:quarkus-oidc MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-oidc and may be impacted: - io.quarkus:quarkus-keycloak-authorization 1.3.1.final - io.quarkus:quarkus-keycloak-authorization-deploymen...
io.quarkus:quarkus-keycloak-authorization (0.27.0), io.quarkus:quarkus-keycloak-authorization-deployment (0.27.0) +2 more potentially affected by CVE-2023-1584 via io.quarkus:quarkus-oidc (0.27.0)
io.quarkus:quarkus-oidc MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-oidc and may be impacted: - io.quarkus:quarkus-keycloak-authorization 0.27.0 - io.quarkus:quarkus-keycloak-authorization-deployment 0.27.0 -...
CVE-2022-32557
An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers...
CVE-2022-32557
An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers...
CVE-2022-32557
An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers...
Authentication flaw
An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers...
CVE-2022-32557
CVE-2022-32557 affects Couchbase Server versions prior to 7.0.4, where the Index Service does not enforce authentication for TCP/TLS servers. This creates potential unauthorized access from the network (attack vector: network, low attack complexity). The CVSS details indicate a high impact on int...
CVE-2022-32557
An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers...
PT-2022-21369 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.0.4 Description: The issue is related to the Index Service in Couchbase Server, which does not enforce authentication for TCP/TLS servers. This lack of authentication enforcement can lead to unauthorized...
CVE-2022-32557: Missing Authentication for Critical Function
An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers...