https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:30:09 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-626 certfr-2022-avi-626 https://cve.radiocsirt.org/vuln/certfr-2022-avi-626 https://cve.radiocsirt.org/vuln/euvd-2026-11753 EUVD-2026-11753 https://cve.radiocsirt.org/vuln/euvd-2026-11753 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1466 <p>Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.</p> <p>Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-1466 https://cve.radiocsirt.org/vuln/ghsa-f32v-vf79-p29q <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-core</p> <p>Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.</p> https://cve.radiocsirt.org/vuln/ghsa-f32v-vf79-p29q https://cve.radiocsirt.org/vuln/gsd-2022-1466 gsd-2022-1466 https://cve.radiocsirt.org/vuln/gsd-2022-1466 https://cve.radiocsirt.org/vuln/rhsa-2022:0449 <p>log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender keycloak: Improper authorization for master realm log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender log4j: Unsafe deserialization flaw in Chainsaw log viewer</p> <p>log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender keycloak: Improper authorization for master realm log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender log4j: Unsafe deserialization flaw in Chainsaw log viewer</p> https://cve.radiocsirt.org/vuln/rhsa-2022:0449 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794 <p>Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794