#maven

共收录 259 条相关情报。

← 返回所有主题

安全公告2026-10-30 发布MEDIUM

NationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571

CVE-2026-54442

### Summary The URL validation regex `^(https?:/)?/.*` added to emissary's `NavAction.java` allows protocol-relative UR

来源摘录 · GitHub Advisory

#advisory #cwe-918 #maven #severity:medium

漏洞预警2026-10-29 发布MEDIUM

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the connector assumed result byt...

CVE-2026-119281

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-838 #maven #severity:medium

漏洞预警2026-10-29 发布LOW

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the MariaDbPoolConnection.recove...

CVE-2026-119280

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-20 #cwe-789 #maven #severity:low

漏洞预警2026-10-29 发布MEDIUM

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.10, the ReadableByteBuf.readLength()...

CVE-2026-119279

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-130 #cwe-190 #maven #severity:medium

漏洞预警2026-10-29 发布MEDIUM

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, when CLIENT_SESSION_TRACK was ne...

CVE-2026-119276

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-130 #cwe-789 #maven #severity:medium

漏洞预警2026-10-29 发布MEDIUM

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the ClientMessage.validateLocalF...

CVE-2026-119210

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-20 #cwe-73 #maven #severity:medium

安全公告2026-10-29 发布HIGH

Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass

CVE-2026-9086

### Description A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with

来源摘录 · GitHub Advisory

#advisory #cwe-79 #maven #severity:high

安全公告2026-10-29 发布MEDIUM

Keycloak vulnerable to information disclosure through arbitrary filesystem path probing

CVE-2026-9083

### Description A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulner

来源摘录 · GitHub Advisory

#advisory #cwe-22 #maven #severity:medium

安全公告2026-10-29 发布MEDIUM

Keycloak allows unauthorized access to resources via uma permission ticket bypass

CVE-2026-9799

### Description A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access

来源摘录 · GitHub Advisory

#advisory #cwe-639 #maven #severity:medium

安全公告2026-10-29 发布HIGH

Keycloak vulnerable to authorization bypass via incorrect uri comparison

CVE-2026-9800

### Description A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass

来源摘录 · GitHub Advisory

#advisory #cwe-1025 #maven #severity:high

安全公告2026-10-29 发布MEDIUM

Keycloak: Attacker can re-enable and take over disabled clients via registration access token

CVE-2026-9705

### Description A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously i

来源摘录 · GitHub Advisory

#advisory #cwe-613 #maven #severity:medium

安全公告2026-10-20 发布INFO

A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure

CVE-2026-111762

### *Impact.** Push notification bearer tokens and authentication credentials submitted by clients are written to server