1074 matches found
acmailer vulnerable to cross-site scripting
Overview acmailer provided by Extra Innovation Inc. contains a cross-site scripting vulnerability CWE-79. This vulnerability was reported to IPA, and JPCERT/CC started coordination with the developer in 2023. The developer released the fixed version on 2023. The coordination between JPCERT/CC and...
DSA-5865-1 webkit2gtk - security update
Bulletin has no description...
DLA-4038-2 dcmtk - regression update
Bulletin has no description...
RHSA-2025:0842 Red Hat Security Advisory: OpenShift Container Platform 4.14.46 security update
Bulletin has no description...
OMRON NJ/NX series vulnerable to path traversal
Overview Machine Automation Controller NJ/NX series provided by OMRON Corporation contain a path traversal vulnerability CWE-22, CVE-2024-12083. OMRON Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact An arbitrary file in the affected product...
DLA-4042-1 asterisk - security update
Bulletin has no description...
CVE-2024-54461 Unsanitized Filenames in Flutter package file_selector_android Allow File Overwrites
The file names constructed within fileselector are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select a document file from that provider while using your app and could...
DSA-5852-1 pdns-recursor - security update
Bulletin has no description...
DSA-5844-1 chromium - security update
Bulletin has no description...
DLA-4013-1 node-mocha - security update
Bulletin has no description...
SUSE-SU-2025:0060-1 Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20250108T191942 2025-01-08T19:19:42Z. Refs jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-3371 GHSA-2r2v-9pf8-6342 GO-2025-3374 CVE-2025-22130 GHSA-j4jw-m6xr-fv6c - Update to...
RHSA-2025:0062 Red Hat Security Advisory: kernel security update
Bulletin has no description...
DLA-4009-1 webkit2gtk - security update
Bulletin has no description...
PT-2025-1020 · Cisco · Cisco Crosswork Network Controller
Name of the Vulnerable Software and Affected Versions: Cisco Crosswork Network Controller affected versions not specified Description: The vulnerability exists in the web-based management interface of Cisco Crosswork Network Controller due to improper validation of user-supplied input. An...
DSA-5838-1 gst-plugins-good1.0 - security update
Bulletin has no description...
DLA-4001-1 libxstream-java - security update
Bulletin has no description...
DLA-3996-1 gunicorn - security update
Bulletin has no description...
DSA-5833-1 dpdk - security update
Bulletin has no description...