CVE-2022-49752 device property: fix of node refcount leak in fwnode_graph_get_next_endpoint()

In the Linux kernel, the following vulnerability has been resolved: device property: fix of node refcount leak in fwnodegraphgetnextendpoint The 'parent' returned by fwnodegraphgetportparent with refcount incremented when 'prev' is not NULL, it needs be put when finish using it. Because the paren...

CVE-2025-27793

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. In Vega prior to version 5.32.0, corresponding to vega-functions prior to version 5.17.0, users running Vega/Vega-lite JSON definitions could run unexpected JavaScript code...

PT-2025-13194

Name of the Vulnerable Software and Affected Versions Vega versions prior to 5.32.0 vega-functions versions prior to 5.17.0 Description The issue allows users running Vega/Vega-lite JSON definitions to run unexpected JavaScript code when drawing graphs, unless the library was used with the...

PT-2025-13294 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A node refcount leak issue has been identified in the function fwnode graph get next endpoint. This occurs because the parent returned by fwnode graph get port parent has its refcount...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a fwnodegraphgetnextendpoint reference count leak...

D-Link wireless repeater software mod_graph_auth_uri_handler() Code Execution

The vulnerability of the modgraphauthurihandler function in the wireless repeater software from D-Link, the DAP-1620, relates to the escape of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a service failure b...

Allocation of Resources Without Limits or Throttling

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in handlers.p...

dataset-format-benchmark (>=0.0.11, <=0.0.12), hybrid-graph (>=0.2.0, <=0.61.0) +2 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.9.3)

pytorch-lightning PYPI version 1.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dataset-format-benchmark =0.0.11, =0.2.0, =0.1.0, =0.1.1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

PT-2025-16675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue was found in the Linux kernel's tracing functionality, specifically in the print graph function flags function during tracer switching. This issue can be reproduce...

photonai-graph (0.2.5) potentially affected by unknown CVE via dgl (1.0.0)

dgl PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dgl and may be impacted: - photonai-graph 0.2.5 Source cves: unknown CVE Source advisory: OSV:GHSA-3X5X-FW77-G54C...

graph-sc (>=0.0.1, <=0.0.3) potentially affected by unknown CVE via dgl (0.5.3)

dgl PYPI version 0.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on dgl and may be impacted: - graph-sc =0.0.1, =0.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-3X5X-FW77-G54C...

fluoriclogppka (0.2.7), machine-learning-with-graph (>=0.0.2, <=0.0.3) +1 more potentially affected by unknown CVE via dgl (1.1.2)

dgl PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on dgl and may be impacted: - fluoriclogppka 0.2.7 - machine-learning-with-graph =0.0.2, =0.0.3 - virp 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3X5X-FW77-G54C...

New Malware Campaign Exploits Microsoft Graph API to Infect Windows

FortiGuard Labs discovers an advanced attack using modified Havoc Demon and SharePoint. Explore the attack's evasion techniques and security measures...

langchain-kuzu (>=0.0.1.dev0, <=0.3.0), llama-index-graph-stores-kuzu (>=0.0.1, <=0.6.0) +4 more potentially affected by unknown CVE via kuzu (>=0.0.11, <=0.7.1)

kuzu PYPI version =0.0.11, =0.0.1.dev0, =0.0.1, =0.1.4, =0.1.833, =0.3.5 - preambulate 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-KUZU-12179282...

WordPress WPO365 | MICROSOFT 365 GRAPH MAILER plugin <= 3.2 - Open Redirect via 'redirect_to' Parameter vulnerability

Open Redirect via 'redirectto' Parameter vulnerability discovered by Krzysztof Zając in WordPress Plugin WPO365 | MICROSOFT 365 GRAPH MAILER versions = 3.2...

CVE-2025-27348

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel WP Social SEO Booster – Knowledge Graph Social Signals SEO wp-social-seo-booster allows Stored XSS.This issue affects WP Social SEO Booster – Knowledge Graph Social Signals SEO: from n/a...

WordPress WP Social SEO Booster plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Social SEO Booster – Knowledge Graph Social Signals SEO versions = 1.2.0...

CVE-2025-27348

CVE-2025-27348 pertains to a Stored XSS in the WordPress plugin WP Social SEO Booster – Knowledge Graph Social Signals SEO, affecting versions n/a through 1.2.0. The root cause, per the sources, is improper neutralization of input during web page generation. The vulnerability enables stored cross...

CVE-2025-1488

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.2. This is due to insufficient validation on the redirect url supplied via the 'redirectto' parameter. This makes it possible for unauthenticated attackers to redire...

CVE-2025-1488

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.2. This is due to insufficient validation on the redirect url supplied via the 'redirectto' parameter. This makes it possible for unauthenticated attackers to redire...