Skip to content
OpenAdvisories

Archive

12 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /12 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2016-8629

    Moderate severity vulnerability that affects org.keycloak:keycloak-core

    Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service account authentication could use this flaw to bypass normal permissions and delete…

    Red Hat keycloak org.keycloak:keycloak-core Maven
  • Medium 5.9
    CVE-2017-2585

    keycloak-core vulnerable to timing attacks against JWS token verification

    Red Hat Keycloak before version 2.5.1 has an implementation of HMAC verification for JWS tokens that uses a method that runs in non-constant time, potentially leaving the application vulnerable to timing attacks.

    Red Hat keycloak org.keycloak:keycloak-core Maven
  • Medium 6.1
    CVE-2017-15719

    Cross-site Scripting in wicket-jquery-ui

    In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor.

    Apache Software Foundation Wicket jQuery UI com.googlecode.wicket-jquery-ui:wicket-jquery-ui-parent Maven