git:fuzz-commit-graph: Crash with empty stacktrace

Project: https://github.com/git/git.git Detailed Report: https://oss-fuzz.com/testcase?key=5037060053925888 Project: git Fuzzing Engine: libFuzzer Fuzz Target: fuzz-commit-graph Job Type: libfuzzerasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61b000024000 Crash State: NULL...

Vulnerabilities fixed in Oracle Database Server

Oracle has fixed vulnerabilities in the following products: Oracle Database Server Oracle Database - Enterprise Edition RDBMS Security. Oracle Spatial and Graph Oracle Universal Installer Oracle Application Express Oracle SQLcl The vulnerabilities potentially enable a malicious party to perform...

owl-sanitizer-data-quality (>=0.1.0, <=0.5.0), pyrasterframes (0.9.0) +2 more potentially affected by CVE-2022-33891 via pyspark (2.4.5)

pyspark PYPI version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - owl-sanitizer-data-quality =0.1.0, =0.3.1, =0.3.15 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

owl-sanitizer-data-quality (>=0.1.0, <=0.5.0), pyrasterframes (0.9.0) +2 more potentially affected by CVE-2022-33891 via pyspark (2.4.5)

pyspark PYPI version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - owl-sanitizer-data-quality =0.1.0, =0.3.1, =0.3.15 Source cves: CVE-2022-33891 Source advisory: OSV:PYSEC-2022-236...

Malicious Package

Overview wm-ngx-graph is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

[SECURITY] Fedora 35 Update: asciigraph-0.5.5-2.fc35

Go package to make lightweight ASCII line graph =EF=BF=BD=EF=BF=BD=EF=BF=BD =EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD in command line apps w ith no other dependencies...

GO-2022-0300 Panic via malicious inputs in github.com/graph-gophers/graphql-go

Malicious inputs can cause a panic. A maliciously crafted input can cause a stack overflow and panic. Any user with access to the GraphQL can send such a query. This issue only occurs when using the graphql.MaxDepth schema option which is highly recommended in most cases...

How To Configure Veeam Backup for Microsoft 365 to Use Microsoft Graph Export API for Teams

Purpose This article documents the procedure for enabling Veeam Backup for Microsoft 365 to backup Teams public channel posts using the Teams Export APIs.Veeam Backup for Microsoft 365 backs up Teams channel messages. For more information on the limitations of Teams chat backup, click here. In...

Fedora: Security Advisory for asciigraph (FEDORA-2022-ba365d3703)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: grafana-7.5.15-3.fc36

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

[SECURITY] Fedora 36 Update: asciigraph-0.5.5-2.fc36

Go package to make lightweight ASCII line graph =EF=BF=BD=EF=BF=BD=EF=BF=BD =EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD in command line apps w ith no other dependencies...

PT-2025-26039

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak bug was found in the graph get type function of the Linux kernel's ASoc audio-graph-card2 component. The issue arises because of node put is not called for the reference...

About CMDB Sync Integration with Qualys CyberSecurity Asset Management

Welcome to the first in a new series of blog posts about Qualys integrations. This first blog in the series covers our integrations as they relate to CMDB Sync, which is a part of Qualys CyberSecurity Asset Management CSAM and has two versions. One version is for basic ServiceNow customers who ha...

sidekiq: WebUI Denial of Service caused by number of days on graph

A denial of service vulnerability was found in job scheduler sidekiq. An attacker can request statistics for the graph and, since there were no limits on the days parameter, overload the system, affecting the WebUI...

Information Disclosure

Mermaid is vulnerable to information disclosure. The vulnerability exists due to a css injection into the generated graph allowing for arbitrary graph modification leading to information disclosure by querying form data by css selectors...

io.jenkins.blueocean:blueocean (>=1.1.6, <=1.1.7), io.jenkins.blueocean:blueocean-events (>=1.1.6, <=1.1.7) +6 more potentially affected by CVE-2022-34177 via org.jenkins-ci.plugins:pipeline-input-step (2.8)

org.jenkins-ci.plugins:pipeline-input-step MAVEN version 2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:pipeline-input-step and may be impacted: - io.jenkins.blueocean:blueocean =1.1.6, =1.1.6, =1.1.6, =1.1.6, =2.0.0, =1.7,...

Malicious code in azure-arm-resourcegraph-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfeb422210456548ba2a9902ffcd7a41576f4fe22ed8198da3de5d6efdca3350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5562 Malicious code in query-graph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e93d4914cf5b0a251c059868bb79bf45b2835c44e3cc50840235b1d8196e675e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in query-graph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e93d4914cf5b0a251c059868bb79bf45b2835c44e3cc50840235b1d8196e675e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How to Activate Access to Microsoft Graph Teams Export APIs

Preliminary Action This article documents how to configure your app registration to access the Microsoft Graph Export API for Teams, which is necessary to enable Veeam Backup for Microsoft 365 6a and newer to protect Teams public channel posts. Once the Teams Protected APIs are accessible and Vee...