EUVD-2026-114891

Missing authorization in Apache Wicket. org.apache.wicket.authorization.IAuthorizationStrategy declares isResourceAuthorized, and that method has a single enforcement point in the framework: org.apache.wicket.request.handler.resource.ResourceRequestHandler, the handler that serves a resource...

Missing Authorization

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

CVE-2026-82705

Missing authorization in Apache Wicket. org.apache.wicket.authorization.IAuthorizationStrategy declares isResourceAuthorized, and that method has a single enforcement point in the framework: org.apache.wicket.request.handler.resource.ResourceRequestHandler, the handler that serves a resource...

CVE-2026-82705

Apache Wicket (versions 8.0.0-8.19.0 , 9.0.0-9.24.0 , and 10.0.0-10.11.0 ) is vulnerable to a missing authorization flaw. The issue occurs because the framework's IAuthorizationStrategy#isResourceAuthorized() check is only enforced when resources are reached via a ResourceReference. If a componen...

CVE-2026-82705 Apache Wicket: The configured authorization strategy is not applied to an IResource embedded in a component

Missing authorization in Apache Wicket. org.apache.wicket.authorization.IAuthorizationStrategy declares isResourceAuthorized, and that method has a single enforcement point in the framework: org.apache.wicket.request.handler.resource.ResourceRequestHandler, the handler that serves a resource...

PT-2026-135043

Missing authorization in Apache Wicket. org.apache.wicket.authorization.IAuthorizationStrategy declares isResourceAuthorized, and that method has a single enforcement point in the framework: org.apache.wicket.request.handler.resource.ResourceRequestHandler, the handler that serves a resource...

CVE-2026-82705: Apache Software Foundation Apache Wicket: Missing authorization in Apache Wicket

Missing authorization in Apache Wicket. org.apache.wicket.authorization.IAuthorizationStrategy declares isResourceAuthorized, and that method has a single enforcement point in the framework: org.apache.wicket.request.handler.resource.ResourceRequestHandler, the handler that serves a resource...

CVE-2018-18863

NGA ResourceLink 20.0.2.1 allows local file inclusion...

EUVD-2018-10574

Malware in sbrugna...

CVE-2018-18863

NGA ResourceLink 20.0.2.1 allows local file inclusion...

CVE-2018-18863

NGA ResourceLink 20.0.2.1 allows local file inclusion...

Design/Logic Flaw

NGA ResourceLink 20.0.2.1 allows local file inclusion...

CVE-2018-18863

CVE-2018-18863 affects NGA ResourceLink 20.0.2.1 and is due to a local file inclusion vulnerability. The connected Red Hat and NVD entries reiterate that NGA ResourceLink 20.0.2.1 allows configuring or serving content in a way that can expose local files. The materials do not provide explicit imp...

CVE-2018-18863

NGA ResourceLink 20.0.2.1 allows local file inclusion...

CVE-2018-18863: Improper Limitation of a Pathname to a Restricted Directory

NGA ResourceLink 20.0.2.1 allows local file inclusion...

PT-2019-9652

Name of the Vulnerable Software and Affected Versions NGA ResourceLink version 20.0.2.1 Description The issue allows for local file inclusion. Recommendations For version 20.0.2.1, update to a newer version that contains a fix for this issue...

RedHat Update for tomcat RHSA-2017:2247-01

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

tomcat: unrestricted access to global resources

It was discovered that it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not...

tomcat: unrestricted access to global resources

It was discovered that it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not...

tomcat: unrestricted access to global resources

It was discovered that it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not...