de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.5.0), io.apiman:apiman-distro-wildfly9 (1.2.1.final) +88 more potentially affected by CVE-2019-10201 via org.keycloak:keycloak-core (1.7.0.final)

org.keycloak:keycloak-core MAVEN version 1.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.5.0 - io.apiman:apiman-distro-wildfly9 1.2.1.final...

Uber: Unsecured Dropwizard Admin Panel on display.uber-adsystem.com exposes sensitive server information

The dropwizard instance running on display.uber-adsystem.com is unsecured, meaning any unauthenticated user can view and use it's admin tools. These tools expose sensitive information on Uber production servers, including the current threads running, info on the CPU, and more server info that...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.7.3), io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (1.2.6.final) +55 more potentially affected by CVE-2019-3875 via org.keycloak:keycloak-core (1.9.4.final)

org.keycloak:keycloak-core MAVEN version 1.9.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.7.3 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.9.0), org.jboss.windup.web:test-authentication-client (>=4.0.0.beta1, <=4.0.1.final) +50 more potentially affected by CVE-2019-3875 via org.keycloak:keycloak-core (2.1.0.final)

org.keycloak:keycloak-core MAVEN version 2.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.9.0 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.6.0), org.hawkular.accounts:hawkular-accounts (>=2.0.18.final, <=2.0.19.final) +89 more potentially affected by CVE-2019-3868 via org.keycloak:keycloak-core (1.8.0.final)

org.keycloak:keycloak-core MAVEN version 1.8.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.6.0 - org.hawkular.accounts:hawkular-accounts...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.9.0), org.jboss.windup.web:test-authentication-client (>=4.0.0.beta1, <=4.0.1.final) +50 more potentially affected by CVE-2019-3868 via org.keycloak:keycloak-core (2.1.0.final)

org.keycloak:keycloak-core MAVEN version 2.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.9.0 -...

com.yammer.dropwizard:dropwizard-client (0.1.2), com.yammer.dropwizard:dropwizard-core (0.1.2) +51 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (7.6.0.rc3)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.1.2 - com.yammer.dropwizard:dropwizard-core 0.1.2 -...

Unsafe Dependency Resolution

Overview io.dropwizard:dropwizard-example is a simple library for building production-ready RESTful web services. Affected versions of this package are vulnerable to Unsafe Dependency Resolution due to resolving dependencies over an insecure channel http. If the build occurred over an insecure...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (>=0.2.1, <=0.3.0), org.keycloak:keycloak-account-api (1.5.0-final) +84 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (1.5.0-final)

org.keycloak:keycloak-core MAVEN version 1.5.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard =0.2.1, =0.3.0 - org.keycloak:keycloak-account-api...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (>=0.4.0, <=0.4.1), org.hawkular.accounts:hawkular-accounts (>=2.0.0.final, <=2.0.6.final) +98 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (1.6.1.final)

org.keycloak:keycloak-core MAVEN version 1.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard =0.4.0, =2.0.0.final, =2.0.0.final, =2.0.0.final,...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.6.0), org.hawkular.accounts:hawkular-accounts (>=2.0.18.final, <=2.0.19.final) +89 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (1.8.0.final)

org.keycloak:keycloak-core MAVEN version 1.8.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.6.0 - org.hawkular.accounts:hawkular-accounts...

com.yammer.dropwizard:dropwizard-client (0.1.1), com.yammer.dropwizard:dropwizard-core (0.1.1) +50 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.6.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.1.1 - com.yammer.dropwizard:dropwizard-core 0.1.1 -...

com.yammer.dropwizard:dropwizard-client (0.2.1), com.yammer.dropwizard:dropwizard-core (0.2.1) +53 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.6.1.v20120215)

org.eclipse.jetty:jetty-server MAVEN version 7.6.1.v20120215 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.2.1 - com.yammer.dropwizard:dropwizard-core 0.2...

com.yammer.dropwizard:dropwizard-client (0.1.0), com.yammer.dropwizard:dropwizard-core (0.1.0) +69 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.6.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.1.0 - com.yammer.dropwizard:dropwizard-core 0.1.0 -...

com.yammer.dropwizard:dropwizard-client (0.1.2), com.yammer.dropwizard:dropwizard-core (0.1.2) +51 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.6.0.rc3)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.1.2 - com.yammer.dropwizard:dropwizard-core 0.1.2 -...

com.yammer.dropwizard:dropwizard-client (0.2.1), com.yammer.dropwizard:dropwizard-core (0.2.1) +53 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.6.1.v20120215)

org.eclipse.jetty:jetty-server MAVEN version 7.6.1.v20120215 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.2.1 - com.yammer.dropwizard:dropwizard-core 0.2...

com.yammer.dropwizard:dropwizard-client (0.1.1), com.yammer.dropwizard:dropwizard-core (0.1.1) +50 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.6.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.1.1 - com.yammer.dropwizard:dropwizard-core 0.1.1 -...

com.yammer.dropwizard:dropwizard-client (0.1.0), com.yammer.dropwizard:dropwizard-core (0.1.0) +69 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.6.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.1.0 - com.yammer.dropwizard:dropwizard-core 0.1.0 -...

com.adaptrex:adaptrex-server (>=0.5.0, <=0.9.12), com.bazaarvoice.dropwizard:dropwizard-configurable-assets-bundle (>=0.1.4, <=0.1.7) +79 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (8.1.5.v20120716)

org.eclipse.jetty:jetty-server MAVEN version 8.1.5.v20120716 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.adaptrex:adaptrex-server =0.5.0, =0.1.4, =0.5.1-1, =0.5.1-1, =0.6.0, =0.5.0, =1.1.0,...

com.yammer.dropwizard:dropwizard-client (0.1.1), com.yammer.dropwizard:dropwizard-core (0.1.1) +50 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.6.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.1.1 - com.yammer.dropwizard:dropwizard-core 0.1.1 -...