org.keycloak:keycloak-dependencies-server-all (3.4.0.final), org.keycloak:keycloak-server-feature-pack (3.4.0.final) +1 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (3.4.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.0.final -...

org.keycloak:keycloak-dependencies-server-all (3.4.1.final), org.keycloak:keycloak-server-feature-pack (3.4.1.final) +1 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (3.4.1.final)

org.keycloak:keycloak-model-jpa MAVEN version 3.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.1.final -...

org.keycloak:keycloak-dependencies-server-all (3.3.0.cr1), org.keycloak:keycloak-server-feature-pack (3.3.0.cr1) +1 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-infinispan (3.3.0.cr1)

org.keycloak:keycloak-model-infinispan MAVEN version 3.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.3.0.cr1 -...

dk.grinn.keycloak:keycloak-migrate-resource (0.0.5), dk.grinn.keycloak:keycloak-migrate-spi (>=0.0.4, <=0.0.5) +4 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (5.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource 0.0.5 - dk.grinn.keycloak:keycloak-migrate-spi =0.0.4...

dk.grinn.keycloak:keycloak-migrate-resource (>=2.0.0, <=2.0.3), dk.grinn.keycloak:keycloak-migrate-spi (>=2.0.0, <=2.0.3) +3 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (7.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource =2.0.0, =2.0.0, =2.0.3 -...

org.keycloak:keycloak-dependencies-server-all (3.4.1.final), org.keycloak:keycloak-server-feature-pack (3.4.1.final) +1 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-infinispan (3.4.1.final)

org.keycloak:keycloak-model-infinispan MAVEN version 3.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.1.final -...

org.keycloak:keycloak-dependencies-server-all (3.4.0.final), org.keycloak:keycloak-server-feature-pack (3.4.0.final) +1 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-infinispan (3.4.0.final)

org.keycloak:keycloak-model-infinispan MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.0.final -...

org.keycloak:keycloak-dependencies-server-all (3.2.1.final), org.keycloak:keycloak-server-feature-pack (3.2.1.final) +1 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-infinispan (3.2.1.final)

org.keycloak:keycloak-model-infinispan MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.1.final -...

org.keycloak:keycloak-dependencies-server-all (6.0.0), org.keycloak:keycloak-server-feature-pack (6.0.0) +3 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-infinispan (6.0.0)

org.keycloak:keycloak-model-infinispan MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 6.0.0 -...

org.keycloak:keycloak-dependencies-server-all (3.2.0.cr1), org.keycloak:keycloak-server-feature-pack (3.2.0.cr1) +1 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (3.2.0.cr1)

org.keycloak:keycloak-model-jpa MAVEN version 3.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.0.cr1 -...

org.keycloak:keycloak-dependencies-server-all (3.3.0.final), org.keycloak:keycloak-server-feature-pack (3.3.0.final) +1 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-infinispan (3.3.0.final)

org.keycloak:keycloak-model-infinispan MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.3.0.final -...

org.keycloak:keycloak-dependencies-server-all (1.3.0.final), org.keycloak:keycloak-server-dist (1.3.0.final) +1 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (1.3.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 1.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.3.0.final - org.keycloak:keycloak-server-di...

Command injection

Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate...

Open Redirect

Overview drupal/drupal is an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to Open Redirect via the Overlay module due to insufficient validation of the URLs prior to displaying their contents. Remediation...

Drupal has open redirect vulnerability in the Overlay module

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

GHSA-HXG2-5C8P-PPWM Drupal has open redirect vulnerability in the Overlay module

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Huawei Emui and Magic UI third-party pop-up overlay vulnerability

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI third-party pop-up override vulnerability can be exploited by attackers to cause system pop-ups to be overridden, thereby misleading users into...

GHSA-4X32-H296-RG6J Singularity Incorrect Access Control

Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features...

Singularity Incorrect Access Control

Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features...

CVE-2022-20007

In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foreground, when it is not, due to a race condition. This could lead to local escalation of privilege with no additional execution privileges neede...