Bytecode-Centric Detection of Known-To-Be-Vulnerable Dependencies in Java Projects

On average, 71% of the code in typical Java projects comes from open-source software OSS dependencies, making OSS dependencies the dominant component of modern software code bases. This high degree of OSS reliance comes with a considerable security risk of adding known security vulnerabilities to...

SUSE-SU-2025:03643-1 Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP7)

This update for the Linux Kernel 6.4.0-150700713 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nftables: reject duplicate device on updates bsc1249534. - CVE-2025-38499: cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (4.0.2-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.4) +8 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (25.0.4)

org.keycloak:keycloak-admin-ui MAVEN version 25.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests 4.0.2-25.0 -...

org.keycloak:keycloak-api-docs-dist (16.1.1), org.keycloak:keycloak-dependencies-server-all (16.1.1) +2 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (16.1.1)

org.keycloak:keycloak-admin-ui MAVEN version 16.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-api-docs-dist 16.1.1 - org.keycloak:keycloak-dependencies-server-all 16.1.1 ...

org.keycloak:keycloak-dependencies-server-all (25.0.3), org.keycloak:keycloak-dependencies-server-min (25.0.3) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (25.0.3)

org.keycloak:keycloak-account-ui MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.3 -...

org.keycloak:keycloak-dependencies-server-all (24.0.0), org.keycloak:keycloak-dependencies-server-min (24.0.0) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (24.0.0)

org.keycloak:keycloak-admin-ui MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.0 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-dependencies-server-all (24.0.4), org.keycloak:keycloak-dependencies-server-min (24.0.4) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (24.0.4)

org.keycloak:keycloak-account-ui MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.4 -...

org.keycloak:keycloak-dependencies-server-all (25.0.5), org.keycloak:keycloak-dependencies-server-min (25.0.5) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (25.0.5)

org.keycloak:keycloak-account-ui MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.5 -...

org.keycloak:keycloak-dependencies-server-all (23.0.4), org.keycloak:keycloak-dependencies-server-min (23.0.4) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (23.0.4)

org.keycloak:keycloak-admin-ui MAVEN version 23.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.4 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-dependencies-server-all (24.0.1), org.keycloak:keycloak-dependencies-server-min (24.0.1) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (24.0.1)

org.keycloak:keycloak-admin-ui MAVEN version 24.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.1 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-api-docs-dist (15.1.1), org.keycloak:keycloak-dependencies-server-all (15.1.1) +2 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (15.1.1)

org.keycloak:keycloak-admin-ui MAVEN version 15.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-api-docs-dist 15.1.1 - org.keycloak:keycloak-dependencies-server-all 15.1.1 ...

org.keycloak:keycloak-dependencies-server-all (25.0.0), org.keycloak:keycloak-dependencies-server-min (25.0.0) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (25.0.0)

org.keycloak:keycloak-account-ui MAVEN version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.0 -...

org.keycloak:keycloak-dependencies-server-all (23.0.3), org.keycloak:keycloak-dependencies-server-min (23.0.3) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (23.0.3)

org.keycloak:keycloak-account-ui MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.3 -...

CVE-2025-11493

The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, and integrations. This creates a risk where an on-path attacker could perform a man-in-the-middle attack and substitute malicious files for legitimate ones by...

CVE-2025-11493

The CVE-2025-11493 entry concerns the ConnectWise Automate Agent. The connected sources describe that the agent does not fully verify the authenticity of files downloaded from the server (updates, dependencies, and integrations), creating a risk of a man-in-the-middle substitution of legitimate f...

CVE-2025-24052

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware depende...

Malicious code in synthetixio-deps-security-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a943efd071177c98f72d2f45c2c4af1fcef99b69646dc9ad1f490db03f90a4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48425 Malicious code in synthetixio-deps-security-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a943efd071177c98f72d2f45c2c4af1fcef99b69646dc9ad1f490db03f90a4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-24990

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware depende...

CVE-2025-24990

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware depende...