149 matches found
CVE-2026-18211
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configurations, such as requiring encrypted connections for redirect URIs. Due to an improper check that only looks at the...
CVE-2026-18211
CVE-2026-18211 affects Keycloak core services, specifically the secure-client-uris policy executor. Affected component enforces security requirements on client configurations (e.g., redirect URIs) but contains an improper check that only inspects the start of a URL rather than validating the host...
CVE-2026-18211 Keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configurations, such as requiring encrypted connections for redirect URIs. Due to an improper check that only looks at the...
CVE-2026-18211 Keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configurations, such as requiring encrypted connections for redirect URIs. Due to an improper check that only looks at the...
Improperly Implemented Security Check for Standard
Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improperly Implemented Security Check for Standard through the secure-client-uris client policy executor in t...
EUVD-2018-19297
Malware in sbrugna...
EUVD-2006-0969
Malware in sbrugna...
EUVD-2020-5435
Malware in sbrugna...
EUVD-2024-18106
Malicious code in bioql PyPI...
EUVD-2023-38379
Malicious code in bioql PyPI...
EUVD-2024-45518
Malicious code in bioql PyPI...
EUVD-2023-24420
Malicious code in bioql PyPI...
EUVD-2024-18189
Malicious code in bioql PyPI...
EUVD-2024-18052
Malicious code in bioql PyPI...
EUVD-2024-18053
Malicious code in bioql PyPI...
EUVD-2023-24419
Malicious code in bioql PyPI...
CVE-2024-20391
A vulnerability in the Network Access Manager NAM module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit...
CVE-2024-20474
A vulnerability in Internet Key Exchange version 2 IKEv2 processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service DoS of Cisco Secure Client. This vulnerability is due to an integer underflow condition. An attacker could exploit this...
CVE-2023-20240
Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected system. These vulnerabilities are due to an out-of-bounds memory read from Cisco Secure Clie...
CVE-2023-20241
Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected system. These vulnerabilities are due to an out-of-bounds memory read from Cisco Secure Clie...