Lucene search
K

2348 matches found

Github Security Blog
Github Security Blog
added 2022/08/12 3:38 p.m.34 views

Neo4j Graph apoc plugins Partial Path Traversal Vulnerability

Impact A partial Directory Traversal Vulnerability found in apoc.log.stream function of apoc plugins in Neo4j Graph database. This issue allows a malicious actor to potentially break out of the expected directory. The impact is limited to sibling directories. For example,...

7.5CVSS7.2AI score0.01323EPSS
Exploits1References7Affected Software1
OSV
OSV
added 2022/08/12 3:38 p.m.31 views

GHSA-78F9-745F-278P Neo4j Graph apoc plugins Partial Path Traversal Vulnerability

Impact A partial Directory Traversal Vulnerability found in apoc.log.stream function of apoc plugins in Neo4j Graph database. This issue allows a malicious actor to potentially break out of the expected directory. The impact is limited to sibling directories. For example,...

7.5CVSS7.4AI score0.01323EPSS
Exploits1References7
Fedora
Fedora
added 2022/07/31 1:37 a.m.15 views

[SECURITY] Fedora 36 Update: grafana-7.5.15-4.fc36

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2022/07/31 12:0 a.m.8 views

Fedora: Security Advisory for asciigraph (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
OSV
OSV
added 2022/07/28 3:15 p.m.12 views

CVE-2016-2138

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xssclean in class/KippoInput.class.php...

6.4CVSS6.2AI score
Exploits0References2
OSV
OSV
added 2022/07/28 3:15 p.m.13 views

CVE-2016-2139

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $filelink in class/KippoInput.class.php...

6.4CVSS6.2AI score
Exploits0References2
NVD
NVD
added 2022/07/28 3:15 p.m.13 views

CVE-2016-2139

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $filelink in class/KippoInput.class.php...

6.4CVSS0.00467EPSS
Exploits1References2
NVD
NVD
added 2022/07/28 3:15 p.m.20 views

CVE-2016-2138

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xssclean in class/KippoInput.class.php...

6.4CVSS0.00459EPSS
Exploits1References2
Prion
Prion
added 2022/07/28 3:15 p.m.10 views

Cross site scripting

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xssclean in class/KippoInput.class.php...

5.5CVSS6.3AI score0.00459EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2022/07/28 3:15 p.m.13 views

Cross site scripting

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $filelink in class/KippoInput.class.php...

5.5CVSS6.3AI score0.00467EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/07/28 2:49 p.m.17 views

CVE-2016-2139

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $filelink in class/KippoInput.class.php...

6.2AI score0.00467EPSS
Exploits1References2
CVE
CVE
added 2022/07/28 2:49 p.m.39 views

CVE-2016-2139

CVE-2016-2139 affects kippo-graph prior to version 1.5.1. The vulnerability is a cross-site scripting flaw in the $file_link handling inside KippoInput.class.php. Impact is described as a cross-site scripting vulnerability; no exploitation details are provided beyond the existence of XSS in that ...

6.4CVSS6.1AI score0.00467EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/07/28 2:48 p.m.21 views

CVE-2016-2138

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xssclean in class/KippoInput.class.php...

6.2AI score0.00459EPSS
Exploits1References2
CVE
CVE
added 2022/07/28 2:48 p.m.43 views

CVE-2016-2138

The CVE-2016-2138 entry concerns kippo-graph prior to version 1.5.1. The vulnerability is a cross-site scripting issue in xss_clean() within class/KippoInput.class.php, as described across multiple connected records (Red Hat, OSV, NVD, and related security trackers). Impact details in the sources...

6.4CVSS6.1AI score0.00459EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2022/07/28 12:0 a.m.2 views

kippo-graph 跨站脚本漏洞

kippo-graph is a full-featured script by the individual developer Ioannis Koniaris. It is used to visualize statistics for Kippo-based SSH honeypots. A security vulnerability exists in kippo-graph versions prior to 1.5.1, which stems from a cross-site scripting vulnerability in $filelink in...

6.4CVSS6.2AI score0.00467EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/07/28 12:0 a.m.2 views

kippo-graph 跨站脚本漏洞

kippo-graph is a full-featured script by the individual developer Ioannis Koniaris. It is used to visualize statistics for Kippo-based SSH honeypots. A security vulnerability exists in kippo-graph versions prior to 1.5.1, which stems from a cross-site scripting vulnerability in xssclean in...

6.4CVSS6.2AI score0.00459EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/07/28 12:0 a.m.2 views

PT-2022-7856 · Unknown · Kippo-Graph

Name of the Vulnerable Software and Affected Versions: kippo-graph versions prior to 1.5.1 Description: The issue is related to a cross-site scripting vulnerability in the $file link variable within the class/KippoInput.class.php file. Recommendations: For versions prior to 1.5.1, update to versi...

6.4CVSS6AI score0.00467EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2022/07/28 12:0 a.m.3 views

PT-2022-7855 · Unknown · Kippo-Graph

Name of the Vulnerable Software and Affected Versions: kippo-graph versions prior to 1.5.1 Description: The issue is related to a cross-site scripting vulnerability in the xss clean function within class/KippoInput.class.php. Recommendations: For versions prior to 1.5.1, update to version 1.5.1 o...

6.4CVSS6AI score0.00459EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2022/07/26 3:1 p.m.37 views

Important: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.5CVSS7.2AI score0.02029EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2022/07/25 2:41 p.m.1 views

@alloyify/anvil (>=1.1.2 <=1.1.4), @alloyify/devkit (>=1.1.2 <=1.1.4) +12 more potentially affected by CVE-2022-25907 via ts-deepmerge (=2.0.1)

ts-deepmerge NPM version =2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ts-deepmerge and may be impacted: - @alloyify/anvil =1.1.2, =1.1.2, =1.1.2, =1.1.2, =0.0.0-canary-20220330074435, =0.0.0-canary-20220330074435, =5.0.24, =11.1.27, =4.0.22,...

9.8CVSS7.2AI score0.01477EPSS
Exploits1
Rows per page
Query Builder