org.keycloak:keycloak-authz-policy-drools (3.2.0.final), org.keycloak:keycloak-dependencies-server-all (3.2.0.final) +6 more potentially affected by CVE-2025-1391 via org.keycloak:keycloak-services (3.2.0.final)

org.keycloak:keycloak-services MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.2.0.final -...

org.keycloak:keycloak-dependencies-server-all (11.0.2), org.keycloak:keycloak-server-feature-pack (11.0.2) +3 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (11.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.2 -...

org.keycloak:keycloak-dependencies-server-all (3.3.0.final), org.keycloak:keycloak-server-feature-pack (3.3.0.final) +2 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (3.3.0.final)

org.keycloak:keycloak-ldap-federation MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.3.0.final -...

org.keycloak:keycloak-dependencies-server-all (9.0.0), org.keycloak:keycloak-server-feature-pack (9.0.0) +2 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (9.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 9.0.0 -...

org.keycloak:keycloak-dependencies-server-all (3.4.1.cr1), org.keycloak:keycloak-server-feature-pack (3.4.1.cr1) +2 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (3.4.1.cr1)

org.keycloak:keycloak-ldap-federation MAVEN version 3.4.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.1.cr1 -...

org.keycloak:keycloak-dependencies-server-all (7.0.1), org.keycloak:keycloak-server-feature-pack (7.0.1) +2 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (7.0.1)

org.keycloak:keycloak-ldap-federation MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 7.0.1 -...

org.keycloak:keycloak-dependencies-server-all (5.0.0), org.keycloak:keycloak-server-feature-pack (5.0.0) +2 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (5.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 5.0.0 -...

org.keycloak:keycloak-dependencies-server-all (9.0.2), org.keycloak:keycloak-server-feature-pack (9.0.2) +2 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (9.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 9.0.2 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.12, <=1.3.14), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.12, <=1.3.14) +16 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (15.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.12, =1.3.12, =1.3.12, =1.3.12...

org.keycloak:keycloak-dependencies-server-all (8.0.2), org.keycloak:keycloak-server-feature-pack (8.0.2) +2 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (8.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 8.0.2 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.4), com.github.vzakharchenko:cisco-radius-plugin (1.3.4) +15 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (12.0.3)

org.keycloak:keycloak-ldap-federation MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.4 -...

Concrete CMS input validation vulnerability

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. An input validation error vulnerability exists in Concrete CMS versions 9.0.0 through 9.3.9, which stems from a lack of input cleanup in the Add Folder feature and could lead to a malicious...

dccp: Fix memory leak in dccp_feat_change_recv

...

microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware

An improper input validation flaw was found in the XmlCli feature for UEFI firmware. Some IntelR processors may allow a privileged user to enable privilege escalation via local access...

microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware

An improper input validation flaw was found in the XmlCli feature for UEFI firmware. Some IntelR processors may allow a privileged user to enable privilege escalation via local access...

microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware

An improper input validation flaw was found in the XmlCli feature for UEFI firmware. Some IntelR processors may allow a privileged user to enable privilege escalation via local access...

microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware

An improper input validation flaw was found in the XmlCli feature for UEFI firmware. Some IntelR processors may allow a privileged user to enable privilege escalation via local access...

microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware

An improper input validation flaw was found in the XmlCli feature for UEFI firmware. Some IntelR processors may allow a privileged user to enable privilege escalation via local access...

Collabora Online security vulnerabilities

Collabora Online is an application from Collabora UK. A powerful LibreOffice-based online office that supports all major document, spreadsheet and presentation file formats. A security vulnerability exists in Collabora Online versions 24.04.12.4, 23.05.19, 22.05.25 and earlier, which stems from a...

PT-2025-14335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the netmem feature. The issue allowed the transmission of unreadable network memory netmem packets into the device's...