230 matches found
KB4565351: Windows 10 Version 1903 and Windows 10 Version 1909 August 2020 Security Update
The remote Windows host is missing security update 4565351. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...
KB4571741: Windows 10 Version 1709 August 2020 Security Update
The remote Windows host is missing security update 4571741. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...
io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.2.7.beta1, <=1.2.7.final), io.apiman:apiman-distro-eap7 (>=1.2.7.beta1, <=1.2.7.final) +49 more potentially affected by CVE-2019-14820 via org.keycloak:keycloak-core (1.9.7.final)
org.keycloak:keycloak-core MAVEN version 1.9.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =1.2.7.beta1, =1.2.7.beta1, =1.2.7.beta1,...
io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.1.3.final, <=1.2.1.final), io.apiman:apiman-manager-api-security (>=1.1.2.final, <=1.1.3.final) +82 more potentially affected by CVE-2019-14820 via org.keycloak:keycloak-core (1.2.0.cr1)
org.keycloak:keycloak-core MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =1.1.3.final, =1.1.2.final, =1.1.2.final,...
io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.1.3.final, <=1.2.1.final), io.apiman:apiman-manager-api-security (>=1.1.2.final, <=1.1.3.final) +82 more potentially affected by CVE-2019-10199 via org.keycloak:keycloak-core (1.2.0.cr1)
org.keycloak:keycloak-core MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =1.1.3.final, =1.1.2.final, =1.1.2.final,...
CVE-2017-18439
cPanel before 64.0.21 allows demo accounts to execute code via an ImageManagerdimensions API call SEC-243...
CVE-2018-20938
cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls SEC-324...
PT-2018-13665
Name of the Vulnerable Software and Affected Versions Evolution CMS versions 1.4.0 through 1.4.5 Description The issue allows for XSS via the manager/ API endpoint, specifically through the search parameter. This can potentially lead to malicious script execution. Recommendations For Evolution CM...
io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.2.4.final, <=1.2.6.beta1), io.apiman:apiman-distro-eap7 (>=1.2.4.final, <=1.2.6.beta1) +48 more potentially affected by CVE-2017-12161 via org.keycloak:keycloak-core (1.9.2.final)
org.keycloak:keycloak-core MAVEN version 1.9.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =1.2.4.final, =1.2.4.final, =1.2.4.final,...
