OMRON NJ/NX series vulnerable to path traversal

Overview Machine Automation Controller NJ/NX series provided by OMRON Corporation contain a path traversal vulnerability CWE-22, CVE-2024-12083. OMRON Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact An arbitrary file in the affected product...

DLA-4042-1 asterisk - security update

Bulletin has no description...

CVE-2024-54461

The file names constructed within fileselector are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select a document file from that provider while using your app and could...

DSA-5852-1 pdns-recursor - security update

Bulletin has no description...

DSA-5844-1 chromium - security update

Bulletin has no description...

DLA-4013-1 node-mocha - security update

Bulletin has no description...

SUSE-SU-2025:0060-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20250108T191942 2025-01-08T19:19:42Z. Refs jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-3371 GHSA-2r2v-9pf8-6342 GO-2025-3374 CVE-2025-22130 GHSA-j4jw-m6xr-fv6c - Update to...

RHSA-2025:0062 Red Hat Security Advisory: kernel security update

Bulletin has no description...

DLA-4009-1 webkit2gtk - security update

Bulletin has no description...

PT-2025-1020 · Cisco · Cisco Crosswork Network Controller

Name of the Vulnerable Software and Affected Versions: Cisco Crosswork Network Controller affected versions not specified Description: The vulnerability exists in the web-based management interface of Cisco Crosswork Network Controller due to improper validation of user-supplied input. An...

DSA-5838-1 gst-plugins-good1.0 - security update

Bulletin has no description...

DLA-4001-1 libxstream-java - security update

Bulletin has no description...

DLA-3996-1 gunicorn - security update

Bulletin has no description...

DSA-5833-1 dpdk - security update

Bulletin has no description...

DLA-3994-1 gstreamer1.0 - security update

Bulletin has no description...

DLA-3992-1 libsoup2.4 - security update

Bulletin has no description...

DSA-5829-1 chromium - security update

Bulletin has no description...

DLA-3980-1 python3.9 - security update

Bulletin has no description...

DSA-5822-1 simplesamlphp - security update

Bulletin has no description...

PT-2024-8837 · Intel · Intel Server Board S2600St Family Bios/Firmware Update

Name of the Vulnerable Software and Affected Versions: Intel Server Board S2600ST Family BIOS and Firmware Update software all versions Description: The issue is related to an uncontrolled search path element in the Intel Server Board S2600ST Family BIOS and Firmware Update software. This could...