PT-2023-32784 · Wso2 · Wso2

Name of the Vulnerable Software and Affected Versions: WSO2 products affected versions not specified Description: The issue is related to a lack of server-side input validation in the Forum feature, which could allow API rating manipulation. Recommendations: At the moment, there is no information...

CVE-2023-36878: Undefined Security Weakness

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-457)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-457 advisory. .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability CVE-2023-36049 ASP.NET Core - Security Feature Bypass Vulnerability CVE-2023-36558 Tenable has extracted the precedi...

Apple to introduce new feature that makes life harder for iPhone thieves

Reportedly, Apple has plans to make it harder for iPhone thieves to steal your personal information even if they have your device’s passcode. A new feature called Stolen Device Protection is included in the beta version of iOS 17.3. The feature limits access to your private information in case...

dk.grinn.keycloak:keycloak-migrate-resource (>=0.0.6, <=1.0.11), dk.grinn.keycloak:keycloak-migrate-spi (>=0.0.6, <=1.0.11) +3 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (6.0.1)

org.keycloak:keycloak-model-jpa MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource =0.0.6, =0.0.6, =1.0.11 -...

org.keycloak:keycloak-dependencies-server-all (3.4.0.cr1), org.keycloak:keycloak-server-feature-pack (3.4.0.cr1) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (3.4.0.cr1)

org.keycloak:keycloak-model-jpa MAVEN version 3.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.0.cr1 -...

dk.grinn.keycloak:keycloak-migrate-resource (11.0.3.0), dk.grinn.keycloak:keycloak-migrate-spi (11.0.3.0) +3 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (11.0.3)

org.keycloak:keycloak-model-jpa MAVEN version 11.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource 11.0.3.0 - dk.grinn.keycloak:keycloak-migrate-spi...

com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +8 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (10.0.1)

org.keycloak:keycloak-model-jpa MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 - com.github.vzakharchenko:mikrotik-radius-plugi...

org.keycloak:keycloak-dependencies-server-all (7.0.1), org.keycloak:keycloak-server-feature-pack (7.0.1) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (7.0.1)

org.keycloak:keycloak-model-jpa MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 7.0.1 - org.keycloak:keycloak-server-feature-pack...

org.keycloak:keycloak-dependencies-server-all (3.2.1.final), org.keycloak:keycloak-server-feature-pack (3.2.1.final) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (3.2.1.final)

org.keycloak:keycloak-model-jpa MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.1.final -...

dk.grinn.keycloak:keycloak-migrate-resource (>=2.0.0, <=2.0.3), dk.grinn.keycloak:keycloak-migrate-spi (>=2.0.0, <=2.0.3) +3 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (7.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource =2.0.0, =2.0.0, =2.0.3 -...

org.keycloak:keycloak-dependencies-server-all (11.0.1), org.keycloak:keycloak-server-feature-pack (11.0.1) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (11.0.1)

org.keycloak:keycloak-model-jpa MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.1 - org.keycloak:keycloak-server-feature-pack...

org.keycloak:keycloak-dependencies-server-all (3.3.0.final), org.keycloak:keycloak-server-feature-pack (3.3.0.final) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (3.3.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.3.0.final -...

org.keycloak:keycloak-dependencies-server-all (3.4.1.final), org.keycloak:keycloak-server-feature-pack (3.4.1.final) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (3.4.1.final)

org.keycloak:keycloak-model-jpa MAVEN version 3.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.1.final -...

org.keycloak:keycloak-dependencies-server-all (11.0.2), org.keycloak:keycloak-server-feature-pack (11.0.2) +2 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (11.0.2)

org.keycloak:keycloak-model-jpa MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.2 - org.keycloak:keycloak-server-feature-pack...

com.github.vzakharchenko:cisco-radius-plugin (1.2.5), com.github.vzakharchenko:keycloak-plugins (1.2.5) +11 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (10.0.2)

org.keycloak:keycloak-model-jpa MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:cisco-radius-plugin 1.2.5 - com.github.vzakharchenko:keycloak-plugins...

org.keycloak:keycloak-dependencies-server-all (10.0.0), org.keycloak:keycloak-server-feature-pack (10.0.0) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (10.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.0 - org.keycloak:keycloak-server-feature-pack...

AZL-32251 CVE-2023-50269 affecting package squid 5.7-5

Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to...

Design/Logic Flaw

Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to...

UBUNTU-CVE-2023-50269

Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to...