https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:09:24 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-23407 cnvd-2020-23407 https://cve.radiocsirt.org/vuln/cnvd-2020-23407 https://cve.radiocsirt.org/vuln/euvd-2026-35648 EUVD-2026-35648 https://cve.radiocsirt.org/vuln/euvd-2026-35648 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1728 <p>A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing general HTTP security headers in HTTP-responses. This does not directly lead to a security issue, yet it might aid attackers in their efforts to exploit other problems. The flaws unnecessarily make the servers more prone to Clickjacking, channel downgrade attacks and other similar client-based attack vectors.</p> <p>A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing general HTTP security headers in HTTP-responses. This does not directly lead to a security issue, yet it might aid attackers in their efforts to exploit other problems. The flaws unnecessarily make the servers more prone to Clickjacking, channel downgrade attacks and other similar client-based attack vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-1728 https://cve.radiocsirt.org/vuln/ghsa-3gg7-9q2x-79fc <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing general HTTP security headers in HTTP-responses. This does not directly lead to a security issue, yet it might aid attackers in their efforts to exploit other problems. The flaws unnecessarily make the servers more prone to Clickjacking, channel downgrade attacks and other similar client-based attack vectors.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing general HTTP security headers in HTTP-responses. This does not directly lead to a security issue, yet it might aid attackers in their efforts to exploit other problems. The flaws unnecessarily make the servers more prone to Clickjacking, channel downgrade attacks and other similar client-based attack vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-3gg7-9q2x-79fc https://cve.radiocsirt.org/vuln/gsd-2020-1728 gsd-2020-1728 https://cve.radiocsirt.org/vuln/gsd-2020-1728 https://cve.radiocsirt.org/vuln/rhsa-2020:3495 <p>keycloak: security headers missing on REST endpoints keycloak: DoS by sending multiple simultaneous requests with a Content-Length header value greater than actual byte count of request body</p> <p>keycloak: security headers missing on REST endpoints keycloak: DoS by sending multiple simultaneous requests with a Content-Length header value greater than actual byte count of request body</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3495