2369 matches found
org.keycloak:keycloak-authz-policy-drools (3.2.0.cr1), org.keycloak:keycloak-dependencies-server-all (3.2.0.cr1) +6 more potentially affected by CVE-2026-1035 via org.keycloak:keycloak-services (3.2.0.cr1)
org.keycloak:keycloak-services MAVEN version 3.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.2.0.cr1 -...
com.github.vzakharchenko:chillispot-radius-plugin (1.3.3), com.github.vzakharchenko:cisco-radius-plugin (1.3.3) +23 more potentially affected by CVE-2026-1035 via org.keycloak:keycloak-services (12.0.2)
org.keycloak:keycloak-services MAVEN version 12.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.3 -...
org.keycloak:keycloak-authz-policy-drools (2.5.0.final), org.keycloak:keycloak-dependencies-server-all (2.5.0.final) +5 more potentially affected by CVE-2026-1035 via org.keycloak:keycloak-services (2.5.0.final)
org.keycloak:keycloak-services MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.5.0.final -...
org.keycloak:keycloak-authz-policy-drools (2.3.0.cr1), org.keycloak:keycloak-dependencies-server-all (2.3.0.cr1) +5 more potentially affected by CVE-2026-1035 via org.keycloak:keycloak-services (2.3.0.cr1)
org.keycloak:keycloak-services MAVEN version 2.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.3.0.cr1 -...
com.charlyghislain.keycloak:keycloak-importexport (>=11.0.1, <=11.0.2), fr.cnieg.keycloak:attribute-login-provider (>=1.1.0, <=1.2.4) +9 more potentially affected by CVE-2026-1035 via org.keycloak:keycloak-services (11.0.2)
org.keycloak:keycloak-services MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport =11.0.1, =1.1.0, =1.2.4 -...
org.keycloak:keycloak-authz-policy-drools (3.0.0.cr1), org.keycloak:keycloak-dependencies-server-all (3.0.0.cr1) +4 more potentially affected by CVE-2026-1035 via org.keycloak:keycloak-services (3.0.0.cr1)
org.keycloak:keycloak-services MAVEN version 3.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.0.0.cr1 -...
org.keycloak:keycloak-account-freemarker (1.0.3.final), org.keycloak:keycloak-dependencies-server-all (1.0.3.final) +3 more potentially affected by CVE-2026-1035 via org.keycloak:keycloak-services (1.0.3.final)
org.keycloak:keycloak-services MAVEN version 1.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.3.final -...
CLSA-2026-1768110920 kernel: Fix of 16 CVEs
crypto: lzo - Fix compression buffer overrun CVE-2025-38068 - wifi: brcmfmac: fix use-after-free when rescheduling brcmfbtcoexinfo work CVE-2025-39863 - NFSD: Protect against send buffer overflow in NFSv2 READ CVE-2022-43945 - tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. CVE-2025-40186 - can:...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004286)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004286 advisory. An issue was discovered in the Linux kernel before 5.8.15. scalar32minmaxor in kernel/bpf/verifier.c mishandles bounds tracking during use of 64-bit values, aka...
CVE-2025-67082
An SQL injection vulnerability in InvoicePlane through 1.6.3 has been identified in "maxQuantity" and "minQuantity" parameters when generating a report. An authenticated attacker can exploit this issue via error-based SQL injection, allowing for the extraction of arbitrary data from the database...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001865)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001865 advisory. The LISTPOISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the...
CVE-2025-67082
An SQL injection vulnerability exists in InvoicePlane versions through 1.6.3 . The flaw is located in the maxQuantity and minQuantity parameters used during report generation. Due to insufficient sanitization of single quotes , an authenticated attacker can perform an error-based SQL injection to...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002878)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002878 advisory. The killsomethinginfo function in kernel/signal.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to...
UBUNTU-CVE-2025-71111
In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Convert macros to functions to avoid TOCTOU The macro FANFROMREG evaluates its arguments multiple times. When used in lockless contexts involving shared driver data, this leads to Time-of-Check to Time-of-Use TOCTO...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001764)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001764 advisory. A race condition was found in the Linux kernel's bluetooth device driver in min,maxkeysizeset function. This can result in a null pointer dereference issue, possibly...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: dm-stripe: fixed a possible integer overflow. There is a possible integer overflow in stripeiohints if we use an excessively large chunk size. Test whether this overflow occurred, and if it did, do not set limits-iomin and...
On-Chip Semi-Device-Independent Quantum Random Number Generator Exploiting Contextuality
We present a semi-device-independent quantum random number generator QRNG based on the violation of a contextuality inequality, implemented by the integration of two silicon photonic chips. Our system combines a heralded single-photon source with a reconfigurable interferometric mesh to implement...
CVE-2023-4270
The Min Max Control WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
Malicious Package
Overview chai-min is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
