27 matches found
EUVD-2014-3607
Malware in sbrugna...
EUVD-2014-3606
Malware in sbrugna...
org.hawkular.accounts:hawkular-accounts-api (>=1.0.6, <=1.0.16.final), org.hawkular.accounts:hawkular-accounts-common (>=1.0.14.final, <=1.0.16.final) +99 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (1.3.1.final)
org.keycloak:keycloak-core MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.hawkular.accounts:hawkular-accounts-api =1.0.6, =1.0.14.final, =1.0.6, =1.0.7.final, =1.0.7.final...
Red Hat JBoss AeroGear Cross-Site Scripting Vulnerability (CNVD-2022-54320)
Red Hat JBoss AeroGear is an open source library for mobile service connectivity from Red Hat, Inc. A security vulnerability exists in Red Hat JBoss AeroGear, which stems from a persistent cross-site scripting XSS vulnerability. A remote attacker could use this vulnerability to compromise the...
CVE-2014-3650
Multiple persistent cross-site scripting XSS flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these flaws to compromise the application with specially crafted input...
Cross site scripting
Multiple persistent cross-site scripting XSS flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these flaws to compromise the application with specially crafted input...
CVE-2014-3650
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2014-3650
Multiple persistent cross-site scripting XSS flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these flaws to compromise the application with specially crafted input...
PT-2022-7795
Name of the Vulnerable Software and Affected Versions Aerogear affected versions not specified Description Multiple persistent cross-site scripting XSS flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these flaws to compromise the application...
Red Hat JBoss AeroGear cross-site scripting vulnerabilities
Red Hat JBoss AeroGear is an open source library for mobile service connectivity from Red Hat, Inc. A security vulnerability exists in Red Hat JBoss AeroGear, which stems from a persistent cross-site scripting XSS vulnerability. A remote attacker could use this vulnerability to compromise the...
CVE-2014-3650: Improper Neutralization of Input During Web Page Generation
Multiple persistent cross-site scripting XSS flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these flaws to compromise the application with specially crafted input...
org.hawkular.accounts:hawkular-accounts-api (>=1.0.6, <=1.0.16.final), org.hawkular.accounts:hawkular-accounts-common (>=1.0.14.final, <=1.0.16.final) +99 more potentially affected by CVE-2020-1698 via org.keycloak:keycloak-core (1.3.1.final)
org.keycloak:keycloak-core MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.hawkular.accounts:hawkular-accounts-api =1.0.6, =1.0.14.final, =1.0.6, =1.0.7.final, =1.0.7.final...
com.blazebit:blaze-storage-client-keycloak (>=0.2.0, <=0.3.3), com.blazebit:blaze-storage-modules-authentication-keycloak (>=0.2.0, <=0.3.3) +77 more potentially affected by CVE-2020-1697 via org.keycloak:keycloak-core (1.1.0.final)
org.keycloak:keycloak-core MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.blazebit:blaze-storage-client-keycloak =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.16.1, =1.1.0.rc3,...
Red Hat JBoss AeroGear Cross-Site Scripting Vulnerability
Red Hat JBoss AeroGear is an open source library for mobile service connectivity from Red Hat USA. The product provides features such as data synchronization, identity management and push notifications. A cross-site scripting vulnerability exists in Red Hat JBoss AeroGear, which stems from the la...
CVE-2014-3649
JBoss AeroGear has reflected XSS via the password field...
Cross site scripting
JBoss AeroGear has reflected XSS via the password field...
CVE-2014-3649
CVE-2014-3649 affects Red Hat/JBoss AeroGear and refers to a reflected XSS vulnerability in the password field. The root cause cited by CNVD is lack of proper validation of client-side data by the WEB application, enabling an attacker to execute client-side code in a victim’s browser. Public expl...
CVE-2014-3649
JBoss AeroGear has reflected XSS via the password field...
PT-2019-7099
Name of the Vulnerable Software and Affected Versions JBoss AeroGear affected versions not specified Description The issue is related to a reflected XSS that occurs via the password field. Recommendations At the moment, there is no information about a newer version that contains a fix for this...