com.github.vzakharchenko:cisco-radius-plugin (1.2.5), com.github.vzakharchenko:keycloak-plugins (1.2.5) +11 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (10.0.2)

org.keycloak:keycloak-model-jpa MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:cisco-radius-plugin 1.2.5 - com.github.vzakharchenko:keycloak-plugins...

dk.grinn.keycloak:keycloak-migrate-resource (11.0.3.0), dk.grinn.keycloak:keycloak-migrate-spi (11.0.3.0) +3 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (11.0.3)

org.keycloak:keycloak-model-jpa MAVEN version 11.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource 11.0.3.0 - dk.grinn.keycloak:keycloak-migrate-spi...

com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +8 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (10.0.1)

org.keycloak:keycloak-model-jpa MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 - com.github.vzakharchenko:mikrotik-radius-plugi...

org.keycloak:keycloak-dependencies-server-all (7.0.1), org.keycloak:keycloak-server-feature-pack (7.0.1) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (7.0.1)

org.keycloak:keycloak-model-jpa MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 7.0.1 - org.keycloak:keycloak-server-feature-pack...

org.keycloak:keycloak-dependencies-server-all (3.2.1.final), org.keycloak:keycloak-server-feature-pack (3.2.1.final) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (3.2.1.final)

org.keycloak:keycloak-model-jpa MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.1.final -...

dk.grinn.keycloak:keycloak-migrate-resource (>=2.0.0, <=2.0.3), dk.grinn.keycloak:keycloak-migrate-spi (>=2.0.0, <=2.0.3) +3 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (7.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource =2.0.0, =2.0.0, =2.0.3 -...

org.keycloak:keycloak-dependencies-server-all (11.0.1), org.keycloak:keycloak-server-feature-pack (11.0.1) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (11.0.1)

org.keycloak:keycloak-model-jpa MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.1 - org.keycloak:keycloak-server-feature-pack...

org.keycloak:keycloak-dependencies-server-all (3.3.0.final), org.keycloak:keycloak-server-feature-pack (3.3.0.final) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (3.3.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.3.0.final -...

org.keycloak:keycloak-dependencies-server-all (3.4.1.final), org.keycloak:keycloak-server-feature-pack (3.4.1.final) +1 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (3.4.1.final)

org.keycloak:keycloak-model-jpa MAVEN version 3.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.1.final -...

VulnCheck KEV: CVE-2016-0457

Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0456. NOTE: the previous information is...

Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to OpenSSL. (CVE-2023-3446)

Summary IBM App Connect Enterprise is vulnerable to a denial of service due to OpenSSL. CVE-2023-3446 Vulnerability Details CVEID:CVE-2023-3446 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a flaw when using the DHcheck, DHcheckex or EVPPKEYparamcheck functions to check a D...

Security Bulletin: A vulnerability in cryptography-3.3.2-cp36-abi3-manylinux2010_x86_64.whl affects Data Replication on Cloud Pak for Data

Summary A vulnerability in cryptography-3.3.2-cp36-abi3-manylinux2010x8664.whl has been addressed. Vulnerability Details CVEID:CVE-2023-0286 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a type confusion error related to X.400 address processing inside an X.509 GeneralName...

Security Bulletin: A vulnerability in github.com/golang/text/language-v0.3.0 affects Data Replication on Cloud Pak for Data

Summary A vulnerability in the package github.com/golang/text/language-v0.3.0 has been addressed. Vulnerability Details CVEID:CVE-2022-32149 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by improper input validation by the golang.org/x/text/language package. By sending a...

Powr Pack <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode

Description The Contact Form – Custom Builder, Payment Form, and More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping on user supplied attributes...

CVE-2023-45609 WordPress Powr Pack Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POWR.Io Contact Form – Custom Builder, Payment Form, and More allows Stored XSS.This issue affects Contact Form – Custom Builder, Payment Form, and More: from n/a through 2.1.0...

CVE-2023-45609 WordPress Powr Pack Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POWR.Io Contact Form – Custom Builder, Payment Form, and More allows Stored XSS.This issue affects Contact Form – Custom Builder, Payment Form, and More: from n/a through 2.1.0...

Security Bulletin: Vulnerabilities in Apache Struts library affect Tivoli Netcool/OMNIbus WebGUI (CVE-2023-41835)

Summary Apache Struts is used by Tivoli Netcool/OMNIbus WebGUI as part of its web client component. The fix includes Apache Struts v2.5.32. Vulnerability Details CVEID:CVE-2023-41835 DESCRIPTION: Apache Struts is vulnerable to a denial of service, caused by an incomplete cleanup of the...

Vulnerabilities fixed in MOVEit Transfer

Progress has fixed vulnerabilities in MOVEit Transfer. A malicious party could exploit the vulnerability with attribute CVE-2023-6217 exploit for a Cross-Site Scripting ace trap. Such an attack can lead to execution of arbitrary code in the browser of the victim, or potentially access sensitive...

org.keycloak:keycloak-dependencies-server-all (3.3.0.cr1), org.keycloak:keycloak-server-feature-pack (3.3.0.cr1) +2 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-ldap-federation (3.3.0.cr1)

org.keycloak:keycloak-ldap-federation MAVEN version 3.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.3.0.cr1 -...

org.keycloak:keycloak-dependencies-server-all (7.0.0), org.keycloak:keycloak-server-feature-pack (7.0.0) +2 more potentially affected by CVE-2022-2232 via org.keycloak:keycloak-ldap-federation (7.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 7.0.0 -...