org.keycloak:keycloak-quarkus-server-app (12.0.0), org.keycloak:keycloak-quarkus-server-deployment (12.0.0) potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (12.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 12.0.0 -...

org.keycloak:keycloak-quarkus-server-app (12.0.3), org.keycloak:keycloak-quarkus-server-deployment (12.0.3) potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (12.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 12.0.3 -...

org.keycloak:keycloak-guides (19.0.1), org.keycloak:keycloak-guides-maven-plugin (19.0.1) +3 more potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (19.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 19.0.1 - org.keycloak:keycloak-guides-maven-plugin 19.0.1...

org.keycloak:keycloak-guides (24.0.4), org.keycloak:keycloak-guides-maven-plugin (24.0.4) +3 more potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (24.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.4 - org.keycloak:keycloak-guides-maven-plugin 24.0.4...

org.keycloak:keycloak-quarkus-server-app (15.0.0), org.keycloak:keycloak-quarkus-server-deployment (15.0.0) potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (15.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 15.0.0 -...

org.keycloak:keycloak-quarkus-server-app (15.0.1), org.keycloak:keycloak-quarkus-server-deployment (15.0.1) potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (15.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 15.0.1 -...

org.keycloak:keycloak-guides (20.0.3), org.keycloak:keycloak-guides-maven-plugin (20.0.3) +3 more potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (20.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.3 - org.keycloak:keycloak-guides-maven-plugin 20.0.3...

org.keycloak:keycloak-guides (22.0.1), org.keycloak:keycloak-guides-maven-plugin (22.0.1) +3 more potentially affected by CVE-2024-10492 via org.keycloak:keycloak-quarkus-server (22.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 22.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 22.0.1 - org.keycloak:keycloak-guides-maven-plugin 22.0.1...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.5-25.0), org.keycloak:keycloak-guides (>=25.0.0, <=26.0.5) +6 more potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (>=25.0.0, <=26.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version =25.0.0, =3.0.1-25.0, =25.0.0, =25.0.0, =25.0.0, =26.0.0, =25.0.0, =25.0.0, =26.0.0, =26.0.5 Source cves: CVE-2024-10451 Source advisory: MEND:CVE-2024-10451...

org.keycloak:keycloak-dependencies-server-all (20.0.4), org.keycloak:keycloak-guides (20.0.4) +5 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (20.0.4)

org.keycloak:keycloak-ldap-federation MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 20.0.4 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-dependencies-server-all (20.0.0), org.keycloak:keycloak-guides (20.0.0) +6 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (20.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 20.0.0 - org.keycloak:keycloak-guides...

io.kokuwa.keycloak:keycloak-event-metrics (0.2.1), org.keycloak:keycloak-crypto-fips1402 (21.1.0) +13 more potentially affected by CVE-2024-3656 via org.keycloak:keycloak-services (21.1.0)

org.keycloak:keycloak-services MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 0.2.1 - org.keycloak:keycloak-crypto-fips1402 21.1.0 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.10), com.github.vzakharchenko:cisco-radius-plugin (1.3.10) +16 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-ldap-federation (15.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.10 -...

gov.hhs.cms.bluebutton.fhir:bbonfhir-server-app (>=0.1.0-cbbf-1-additional-config-changes-1, <=0.1.0-54), gov.hhs.cms.bluebutton.fhir:bluebutton-server-app (>=0.1.0-cbbf-40-cleanup-and-refactor-round-2-1, <=1.0.0-7) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (2.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - gov.hhs.cms.bluebutton.fhir:bbonfhir-server-app...

GHSA-58QP-5328-V7MH cumulative-distribution-function Infinite Loop vulnerability

Impact Apps using this library on improper data may crash or go into an infinite-loop In the case of a nodejs server-app using this library to act on invalid non-numeric data, the nodejs server may crash. This may affect other users of this server and/or require the server to be rebooted for prop...

org.apache.james:james-server-app (3.5.0), org.apache.james:james-server-spring (3.5.0) potentially affected by CVE-2020-9488 via org.apache.logging.log4j:log4j (2.13.1)

org.apache.logging.log4j:log4j MAVEN version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.logging.log4j:log4j and may be impacted: - org.apache.james:james-server-app 3.5.0 - org.apache.james:james-server-spring 3.5.0 Source cves:...

org.apache.james:james-server-app (3.5.0), org.apache.james:james-server-spring (3.5.0) potentially affected by CVE-2020-9488 via org.apache.logging.log4j:log4j (2.13.1)

org.apache.logging.log4j:log4j MAVEN version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.logging.log4j:log4j and may be impacted: - org.apache.james:james-server-app 3.5.0 - org.apache.james:james-server-spring 3.5.0 Source cves:...

GHSA-4X6V-RWH4-55JW Pomelo allows external control of critical state data

Pomelo v2.2.5 allows external control of critical state data. A malicious user input can corrupt arbitrary methods and attributes in template/game-server/app/servers/connector/handler/entryHandler.js because certain internal attributes can be overwritten via a conflicting name. Hence, a malicious...

PT-2018-18602

Name of the Vulnerable Software and Affected Versions Kontena versions prior to 1.5.0 Description The issue allows for XSS in the "kontena master login --remote" code display. This can be demonstrated by using the /codecode= endpoint in a URI. Recommendations For versions prior to 1.5.0, update t...

Apple OS X Server App Information Disclosure Vulnerability

Apple OS X Server is a set of Unix-based server operating software from Apple.Time Machine is one of the system backup software components. An information disclosure vulnerability exists in the Time Machine server of the Server App in versions of Apple OS X Server prior to 5.1. Because the progra...