OpenSSL 3.2.0 < 3.2.4 Vulnerability

The version of OpenSSL installed on the remote host is prior to 3.2.4. It is, therefore, affected by a vulnerability as referenced in the 3.2.4 advisory. - Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-boun...

opengamedata-api-utils (>=1.1.0, <=1.1.1), opengamedata-common (>=0.0.1, <=1.2.2) +2 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.25)

mysql-connector-python PYPI version 8.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - opengamedata-api-utils =1.1.0, =0.0.1, =1.0.0.dev782, =1.0.0.dev782, =7.1.2 Source cves: CVE-2024-21272 Source...

SUSE-SU-2024:3623-1 Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001338 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifssignalcifsdforreconnect bsc1225312. - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfochangednotify bsc1225739. -...

com.eurodyn.qlack2.util:qlack2-util-sso (>=2.3.5, <=2.3.19), org.keycloak:keycloak-saml-adapter-api-public (3.4.3.final) +26 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (3.4.3.final)

org.keycloak:keycloak-saml-core MAVEN version 3.4.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - com.eurodyn.qlack2.util:qlack2-util-sso =2.3.5, =2.3.19 -...

org.keycloak:keycloak-dependencies-server-all (10.0.1), org.keycloak:keycloak-saml-adapter-api-public (10.0.1) +23 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (10.0.1)

org.keycloak:keycloak-saml-core MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.1 -...

org.keycloak:keycloak-dependencies-server-all (6.0.1), org.keycloak:keycloak-saml-adapter-api-public (6.0.1) +25 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (6.0.1)

org.keycloak:keycloak-saml-core MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 6.0.1 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-dependencies-server-all (9.0.3), org.keycloak:keycloak-saml-adapter-api-public (9.0.3) +23 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (9.0.3)

org.keycloak:keycloak-saml-core MAVEN version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 9.0.3 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-dependencies-server-all (10.0.0), org.keycloak:keycloak-saml-adapter-api-public (10.0.0) +23 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (10.0.0)

org.keycloak:keycloak-saml-core MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.0 -...

org.keycloak:keycloak-saml-adapter-api-public (4.0.0.beta1), org.keycloak:keycloak-saml-adapter-core (4.0.0.beta1) +25 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (4.0.0.beta1)

org.keycloak:keycloak-saml-core MAVEN version 4.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.0.0.beta1 -...

org.keycloak:keycloak-saml-adapter-api-public (4.3.0.final), org.keycloak:keycloak-saml-adapter-core (4.3.0.final) +25 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (4.3.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.3.0.final -...

org.keycloak:keycloak-dependencies-server-all (11.0.1), org.keycloak:keycloak-saml-adapter-api-public (11.0.1) +24 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (11.0.1)

org.keycloak:keycloak-saml-core MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.1 -...

org.keycloak:keycloak-saml-adapter-api-public (4.2.1.final), org.keycloak:keycloak-saml-adapter-core (4.2.1.final) +25 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (4.2.1.final)

org.keycloak:keycloak-saml-core MAVEN version 4.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.2.1.final -...

org.keycloak:keycloak-dependencies-server-all (8.0.2), org.keycloak:keycloak-saml-adapter-api-public (8.0.2) +23 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (8.0.2)

org.keycloak:keycloak-saml-core MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 8.0.2 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-dependencies-server-all (11.0.0), org.keycloak:keycloak-saml-adapter-api-public (11.0.0) +24 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (11.0.0)

org.keycloak:keycloak-saml-core MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.0 -...

Amazon Linux 2023 : openssl, openssl-devel, openssl-libs (ALAS2023-2024-721)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-721 advisory. Issue summary: Applications performing certificate name checks e.g., TLSclients checking server certificates may attempt to read an invalid memoryaddress resulting in abnormal termination of the...

CVE-2024-9916

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection. The attack may be launched remotely. The...

CVE-2024-9916

A critical OS command injection vulnerability exists in HuangDou UTCMS V9 within the file app/modules/ut-cac/admin/cli.php. The root cause is the improper handling of the o argument, which allows an unauthenticated attacker to execute arbitrary commands remotely. This could lead to complete syste...

CVE-2024-9916: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection. The attack may be launched remotely. The...

CVE-2024-9918: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function RunSql of the file app/modules/ut-data/admin/sql.php. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-9917: Deserialization of Untrusted Data

A vulnerability, which was classified as critical, was found in HuangDou UTCMS V9. This affects an unknown part of the file app/modules/ut-template/admin/templatecreat.php. The manipulation of the argument content leads to deserialization. It is possible to initiate the attack remotely. The explo...