org.keycloak:keycloak-quarkus-server-app (13.0.0), org.keycloak:keycloak-quarkus-server-deployment (13.0.0) potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (13.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 13.0.0 -...

org.keycloak:keycloak-guides (20.0.0), org.keycloak:keycloak-guides-maven-plugin (20.0.0) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (20.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.0 - org.keycloak:keycloak-guides-maven-plugin 20.0.0...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=0.8.3-20.0.5, <=0.10.0-20.0.5), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=0.8.3-20.0.5, <=0.10.0-20.0.5) +14 more potentially affected by CVE-2025-12110 via org.keycloak:keycloak-services (20.0.5)

org.keycloak:keycloak-services MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =0.8.3-20.0.5, =0.8.3-20.0.5, =0.10.0-20.0.5 -...

CVE-2023-33293

An issue was discovered in KaiOS 3.0 and 3.1. The binary /system/kaios/api-daemon exposes a local web server on .localhost with subdomains for each installed applications, e.g., myapp.localhost. An attacker can make fetch requests to api-deamon to determine if a given app is installed and read th...

org.keycloak:keycloak-guides (23.0.6), org.keycloak:keycloak-guides-maven-plugin (23.0.6) +3 more potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (23.0.6)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.6 - org.keycloak:keycloak-guides-maven-plugin 23.0.6...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.5-25.0), org.keycloak:keycloak-guides (>=25.0.0, <=26.0.5) +6 more potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (>=25.0.0, <=26.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version =25.0.0, =3.0.1-25.0, =25.0.0, =25.0.0, =25.0.0, =26.0.0, =25.0.0, =25.0.0, =26.0.0, =26.0.5 Source cves: CVE-2024-10451 Source advisory: GHSA-V7GV-XPGF-6395...

org.keycloak:keycloak-guides (18.0.0), org.keycloak:keycloak-guides-maven-plugin (18.0.0) +3 more potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (18.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 18.0.0 - org.keycloak:keycloak-guides-maven-plugin 18.0.0...

org.keycloak:keycloak-guides (23.0.1), org.keycloak:keycloak-guides-maven-plugin (23.0.1) +3 more potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (23.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.1 - org.keycloak:keycloak-guides-maven-plugin 23.0.1...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.6-24.0, <=2.7.4-24.0), org.keycloak:keycloak-guides (>=24.0.0, <=24.0.5) +4 more potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (>=24.0.0, <=24.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version =24.0.0, =2.5.6-24.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.5 Source cves: CVE-2024-10451 Source advisory: GHSA-V7GV-XPGF-6395...

org.keycloak:keycloak-guides (22.0.3), org.keycloak:keycloak-guides-maven-plugin (22.0.3) +3 more potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (22.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 22.0.3 - org.keycloak:keycloak-guides-maven-plugin 22.0.3...

org.keycloak:keycloak-guides (20.0.5), org.keycloak:keycloak-guides-maven-plugin (20.0.5) +3 more potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (20.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.5 - org.keycloak:keycloak-guides-maven-plugin 20.0.5...

org.keycloak:keycloak-quarkus-server-app (15.0.0), org.keycloak:keycloak-quarkus-server-deployment (15.0.0) potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (15.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 15.0.0 -...

org.keycloak:keycloak-quarkus-server-app (12.0.2), org.keycloak:keycloak-quarkus-server-deployment (12.0.2) potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (12.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 12.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 12.0.2 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.5-25.0), org.keycloak:keycloak-guides (>=25.0.0, <=26.0.5) +6 more potentially affected by CVE-2024-10451 via org.keycloak:keycloak-quarkus-server (>=25.0.0, <=26.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version =25.0.0, =3.0.1-25.0, =25.0.0, =25.0.0, =25.0.0, =26.0.0, =25.0.0, =25.0.0, =26.0.0, =26.0.5 Source cves: CVE-2024-10451 Source advisory: MEND:CVE-2024-10451...

io.kokuwa.keycloak:keycloak-event-metrics (0.2.1), org.keycloak:keycloak-crypto-fips1402 (21.1.0) +13 more potentially affected by CVE-2024-3656 via org.keycloak:keycloak-services (21.1.0)

org.keycloak:keycloak-services MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 0.2.1 - org.keycloak:keycloak-crypto-fips1402 21.1.0 -...

GHSA-58QP-5328-V7MH cumulative-distribution-function Infinite Loop vulnerability

Impact Apps using this library on improper data may crash or go into an infinite-loop In the case of a nodejs server-app using this library to act on invalid non-numeric data, the nodejs server may crash. This may affect other users of this server and/or require the server to be rebooted for prop...

org.apache.james:james-server-app (3.5.0), org.apache.james:james-server-spring (3.5.0) potentially affected by CVE-2020-9488 via org.apache.logging.log4j:log4j (2.13.1)

org.apache.logging.log4j:log4j MAVEN version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.logging.log4j:log4j and may be impacted: - org.apache.james:james-server-app 3.5.0 - org.apache.james:james-server-spring 3.5.0 Source cves:...

GHSA-4X6V-RWH4-55JW Pomelo allows external control of critical state data

Pomelo v2.2.5 allows external control of critical state data. A malicious user input can corrupt arbitrary methods and attributes in template/game-server/app/servers/connector/handler/entryHandler.js because certain internal attributes can be overwritten via a conflicting name. Hence, a malicious...

PT-2018-18602

Name of the Vulnerable Software and Affected Versions Kontena versions prior to 1.5.0 Description The issue allows for XSS in the "kontena master login --remote" code display. This can be demonstrated by using the /codecode= endpoint in a URI. Recommendations For versions prior to 1.5.0, update t...

Apple OS X Server App Information Disclosure Vulnerability

Apple OS X Server is a set of Unix-based server operating software from Apple.Time Machine is one of the system backup software components. An information disclosure vulnerability exists in the Time Machine server of the Server App in versions of Apple OS X Server prior to 5.1. Because the progra...