Lucene search
K

7 matches found

Vulnrichment
Vulnrichment
added 2026/05/28 3:44 a.m.11 views

CVE-2026-9793 Keycloak: keycloak: security policy bypass in jwe-encrypted request object processing

A flaw was found in Keycloak. When a JSON Web Encryption JWE encrypted request object is submitted, Keycloak may incorrectly process unsigned claims if the decrypted content is raw JSON, bypassing the configured signature policy. This allows a remote attacker to submit unauthorized claims, leadin...

5.9CVSS5.8AI score0.0012EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/28 3:44 a.m.11 views

EUVD-2026-32707

A flaw was found in Keycloak. When a JSON Web Encryption JWE encrypted request object is submitted, Keycloak may incorrectly process unsigned claims if the decrypted content is raw JSON, bypassing the configured signature policy. This allows a remote attacker to submit unauthorized claims, leadin...

5.9CVSS5.8AI score0.0012EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/27 12:0 a.m.1 views

ZTE GoldenDB 安全漏洞

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. A security vulnerability exists in ZTE GoldenDB, which can be exploited ...

7.7CVSS7.3AI score0.00316EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/27 12:0 a.m.1 views

ZTE GoldenDB 安全漏洞

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An information leakage vulnerability exists in ZTE GoldenDB, which can b...

7.5CVSS6.4AI score0.00307EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/27 12:0 a.m.1 views

ZTE GoldenDB 安全漏洞

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An Access Control Error vulnerability exists in ZTE GoldenDB, which stem...

6.5CVSS6.9AI score0.00229EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/27 12:0 a.m.3 views

ZTE GoldenDB 安全漏洞

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. ZTE GoldenDB suffers from a SQL injection vulnerability, which can be...

7.5CVSS8.1AI score0.0029EPSS
Exploits0References2
CNVD
CNVD
added 2025/03/14 12:0 a.m.6 views

ZTE GoldenDB Input Validation Error Vulnerability

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An input validation error vulnerability exists in ZTE GoldenDB, which...

7.5CVSS7AI score0.00357EPSS
Exploits0References1
Rows per page
Query Builder