CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4623 matches found

Nuclei•added 2026/08/23 2:28 a.m.•170 views

KeyCloak - Information Exposure

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients like client secret without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this...

6.5CVSS6.3AI score0.17943EPSS

SaveExploits0References4

Nuclei•added 2026/08/23 2:28 a.m.•105 views

Keycloak - SAML Core Package Signature Validation Flaw

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Referen...

7.7CVSS6.1AI score0.0203EPSS

SaveExploits0References5

Nuclei•added 2026/08/23 2:28 a.m.•142 views

Keycloak - Open Redirect

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially...

6.1CVSS5AI score0.01959EPSS

SaveExploits0References2

Nuclei•added 2026/08/23 2:28 a.m.•167 views

Keycloak < 24.0.5 - Broken Access Control

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. id: CVE-2024-3656 info...

8.1CVSS7.7AI score0.02862EPSS

SaveExploits0References5

Chainguard•added 2026/08/22 8:26 p.m.•7 views

GHSA-GGG2-9786-HWC8 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, keycloak-config-cli, camunda-zeebe...

5.2AI score

SaveExploits0

Wolfi•added 2026/08/22 8:25 p.m.•9 views

CVE-2026-41001 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli...

5.3CVSS4.7AI score0.00094EPSS

SaveExploits0

Wolfi•added 2026/08/22 8:25 p.m.•6 views

GHSA-GGG2-9786-HWC8 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli...

5.2AI score

SaveExploits0

Nuclei•added 2026/08/22 12:19 p.m.•303 views

Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting

Keycloak 10.0.0 to 18.0.0 contains a cross-site scripting vulnerability via the client-registrations endpoint. On a POST request, the application does not sanitize an unknown attribute name before including it in the error response with a 'Content-Type' of text/hml. Once reflected, the response i...

6.1CVSS6.4AI score0.37246EPSS

SaveExploits3References6

Chainguard•added 2026/08/22 2:17 a.m.•13 views

CVE-2026-9689 vulnerabilities