12202 matches found
Security Bulletin: IBM MQ is vulnerable to an issue within Pacemaker. (CVE-2020-25654)
Summary An issue was identified with Pacemaker which is used by IBM MQ to supply RDQM functionality. Vulnerability Details CVEID: CVE-2020-25654 DESCRIPTION: ClusterLabs Pacemaker could allow a local attacker to bypass security restrictions, caused by an access control list bypass flaw. By sendin...
Elastic Cloud Enterprise security update
Elastic Cloud Enterprise security update ESA-2021-17 Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters. While in the default setting the anonymous user has no permissions and is unable to successfully query any Elasticsearch APIs, an attacker...
PT-2021-6440
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CS SA Integration Pack versions 9.0 through 9.2 Description The issue is related to insufficient input validation in the Snapshot Integration component of the PeopleSoft Enterprise CS SA Integration Pack product. This...
Security Bulletin: IBM Data Replication Affected by Vulnerabilities in IBM Java SDK (CVE-2020-2654)
Summary This bulletin covers common Java SDK vulnerability findings in the IBM Java SDK packaged with this offering. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Libraries component could allow an unauthenticated attacker t...
Security Bulletin: IBM Data Replication Affected by IBM Java SDK Vulnerability (CVE-2019-4732)
Summary This bulletin covers common Java SDK vulnerability findings in the IBM Java SDK packaged with this offering. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0...
Security Bulletin: IBM Data Replication Affected by Multiple Vulnerabilities in IBM Java SDK
Summary This bulletin covers common Java SDK vulnerability findings in the IBM Java SDK packaged with this offering. Vulnerability Details CVEID: CVE-2019-11771 DESCRIPTION: Eclipse OpenJ9 could allow a local attacker to gain elevated privileges on the system, caused by the inclusion of unused...
Security Bulletin: IBM Data Replication Affected by Multiple Vulnerabilities in IBM Java SDK
Summary Java SDK vulnerability findings in the IBM Java SDK packaged with this offering are addressed Vulnerability Details CVEID: CVE-2018-1890 DESCRIPTION: IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege...
Microsoft Office 2013 Service Pack 1 RCE Vulnerability (KB5001983)
This host is missing an important security update according to Microsoft KB5001983 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
org.keycloak:keycloak-dependencies-server-all (11.0.2), org.keycloak:keycloak-server-feature-pack (11.0.2) +2 more potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (11.0.2)
org.keycloak:keycloak-model-infinispan MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.2 -...
org.keycloak:keycloak-dependencies-server-all (3.2.1.final), org.keycloak:keycloak-server-feature-pack (3.2.1.final) +1 more potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (3.2.1.final)
org.keycloak:keycloak-model-infinispan MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.1.final -...
com.github.vzakharchenko:cisco-radius-plugin (1.2.5), com.github.vzakharchenko:keycloak-plugins (1.2.5) +9 more potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (10.0.2)
org.keycloak:keycloak-model-infinispan MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - com.github.vzakharchenko:cisco-radius-plugin 1.2.5 -...
org.keycloak:keycloak-dependencies-server-all (3.2.0.cr1), org.keycloak:keycloak-server-feature-pack (3.2.0.cr1) +1 more potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (3.2.0.cr1)
org.keycloak:keycloak-model-infinispan MAVEN version 3.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.0.cr1 -...
org.keycloak:keycloak-dependencies-server-all (10.0.0), org.keycloak:keycloak-server-feature-pack (10.0.0) +1 more potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (10.0.0)
org.keycloak:keycloak-model-infinispan MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.0 -...
com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +8 more potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (10.0.1)
org.keycloak:keycloak-model-infinispan MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 -...
org.keycloak:keycloak-dependencies-server-all (11.0.3), org.keycloak:keycloak-server-feature-pack (11.0.3) +1 more potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (11.0.3)
org.keycloak:keycloak-model-infinispan MAVEN version 11.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.3 -...
com.github.vzakharchenko:keycloak-plugins (1.2.3), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.3) +8 more potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (9.0.3)
org.keycloak:keycloak-model-infinispan MAVEN version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.3 -...
org.keycloak:keycloak-dependencies-server-all (7.0.1), org.keycloak:keycloak-server-feature-pack (7.0.1) +1 more potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (7.0.1)
org.keycloak:keycloak-model-infinispan MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 7.0.1 -...
Description of the security update for Office Web Apps Server 2013: July 13, 2021 (KB5001986)
None None...