org.keycloak:keycloak-dependencies-server-all (3.1.0.final), org.keycloak:keycloak-saml-adapter-api-public (3.1.0.final) +24 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (3.1.0.final)

org.keycloak:keycloak-saml-core MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.1.0.final -...

org.keycloak:keycloak-dependencies-server-all (6.0.1), org.keycloak:keycloak-saml-adapter-api-public (6.0.1) +25 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (6.0.1)

org.keycloak:keycloak-saml-core MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 6.0.1 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-dependencies-server-all (9.0.3), org.keycloak:keycloak-saml-adapter-api-public (9.0.3) +23 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (9.0.3)

org.keycloak:keycloak-saml-core MAVEN version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 9.0.3 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-broker-saml (1.7.0.final), org.keycloak:keycloak-dependencies-server-all (1.7.0.final) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.7.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.7.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-dependencies-server-all (3.3.0.final), org.keycloak:keycloak-saml-adapter-api-public (3.3.0.final) +26 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (3.3.0.final)

org.keycloak:keycloak-saml-core MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.3.0.final -...

org.keycloak:keycloak-dependencies-server-all (11.0.2), org.keycloak:keycloak-saml-adapter-api-public (11.0.2) +25 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (11.0.2)

org.keycloak:keycloak-saml-core MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.2 -...

org.keycloak:keycloak-dependencies-server-all (11.0.0), org.keycloak:keycloak-saml-adapter-api-public (11.0.0) +24 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (11.0.0)

org.keycloak:keycloak-saml-core MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.0 -...

org.keycloak:keycloak-dependencies-server-all (21.1.2), org.keycloak:keycloak-guides (21.1.2) +24 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (21.1.2)

org.keycloak:keycloak-saml-core MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 21.1.2 - org.keycloak:keycloak-guides 21.1.2 -...

org.keycloak:keycloak-dependencies-server-all (9.0.2), org.keycloak:keycloak-saml-adapter-api-public (9.0.2) +23 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (9.0.2)

org.keycloak:keycloak-saml-core MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 9.0.2 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-dependencies-server-all (3.4.0.final), org.keycloak:keycloak-saml-adapter-api-public (3.4.0.final) +26 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (3.4.0.final)

org.keycloak:keycloak-saml-core MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.0.final -...

io.kokuwa.keycloak:keycloak-event-metrics (1.0.0), net.optionfactory.keycloak:optionfactory-keycloak-cie (>=2.14, <=2.16) +27 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (21.1.1)

org.keycloak:keycloak-saml-core MAVEN version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 1.0.0 -...

org.keycloak:keycloak-dependencies-server-all (2.1.0.final), org.keycloak:keycloak-saml-adapter-api-public (2.1.0.final) +21 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (2.1.0.final)

org.keycloak:keycloak-saml-core MAVEN version 2.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.1.0.final -...

org.keycloak:keycloak-broker-saml (1.6.0.final), org.keycloak:keycloak-dependencies-server-all (1.6.0.final) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.6.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.6.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-dependencies-server-all (20.0.2), org.keycloak:keycloak-guides (20.0.2) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (20.0.2)

org.keycloak:keycloak-saml-core MAVEN version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 20.0.2 - org.keycloak:keycloak-guides 20.0.2 -...

Malware in hilla-components-dependencies

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in hilla-components-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b10fa0be1901d7dc877afdf66a185a7450e3e75a9377cf32d1618128c64862a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9090 Malicious code in hilla-components-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b10fa0be1901d7dc877afdf66a185a7450e3e75a9377cf32d1618128c64862a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature

Summary A Stored Cross-Site Scripting XSS vulnerability in the "Device Dependencies" feature allows authenticated users to inject arbitrary JavaScript through the device name "hostname" parameter. This vulnerability can lead to the execution of malicious code in the context of other users'...

GHSA-RWWC-2V8Q-GC9V LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature

Summary A Stored Cross-Site Scripting XSS vulnerability in the "Device Dependencies" feature allows authenticated users to inject arbitrary JavaScript through the device name "hostname" parameter. This vulnerability can lead to the execution of malicious code in the context of other users'...

CVE-2024-47527 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device-dependencies.inc.php

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the "Device Dependencies" feature allows authenticated users to inject arbitrary JavaScript through the device name "hostname" parameter. This vulnerability can lead to t...