CVE-2016-2138

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xssclean in class/KippoInput.class.php...

CVE-2016-2138

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xssclean in class/KippoInput.class.php...

PT-2022-7855 · Unknown · Kippo-Graph

Name of the Vulnerable Software and Affected Versions: kippo-graph versions prior to 1.5.1 Description: The issue is related to a cross-site scripting vulnerability in the xss clean function within class/KippoInput.class.php. Recommendations: For versions prior to 1.5.1, update to version 1.5.1 o...

kippo-graph cross-site scripting vulnerabilities

kippo-graph is a full-featured script by the individual developer Ioannis Koniaris. It is used to visualize statistics for Kippo-based SSH honeypots. A security vulnerability exists in kippo-graph versions prior to 1.5.1, which stems from a cross-site scripting vulnerability in xssclean in...

kippo-graph cross-site scripting vulnerabilities

kippo-graph is a full-featured script by the individual developer Ioannis Koniaris. It is used to visualize statistics for Kippo-based SSH honeypots. A security vulnerability exists in kippo-graph versions prior to 1.5.1, which stems from a cross-site scripting vulnerability in $filelink in...

PT-2022-7856 · Unknown · Kippo-Graph

Name of the Vulnerable Software and Affected Versions: kippo-graph versions prior to 1.5.1 Description: The issue is related to a cross-site scripting vulnerability in the $file link variable within the class/KippoInput.class.php file. Recommendations: For versions prior to 1.5.1, update to versi...

CVE-2016-2139: Improper Neutralization of Input During Web Page Generation

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $filelink in class/KippoInput.class.php...

CVE-2016-2138: Improper Neutralization of Input During Web Page Generation

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xssclean in class/KippoInput.class.php...

Important: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Malicious code in wm-ngx-graph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59d008558ea082e70d8eade3399fd8c963ded5a168c8ee63bdbb2d110173976c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7198 Malicious code in wm-ngx-graph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59d008558ea082e70d8eade3399fd8c963ded5a168c8ee63bdbb2d110173976c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

git:fuzz-commit-graph: Crash with empty stacktrace

Project: https://github.com/git/git.git Detailed Report: https://oss-fuzz.com/testcase?key=5037060053925888 Project: git Fuzzing Engine: libFuzzer Fuzz Target: fuzz-commit-graph Job Type: libfuzzerasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61b000024000 Crash State: NULL...

Vulnerabilities fixed in Oracle Database Server

Oracle has fixed vulnerabilities in the following products: Oracle Database Server Oracle Database - Enterprise Edition RDBMS Security. Oracle Spatial and Graph Oracle Universal Installer Oracle Application Express Oracle SQLcl The vulnerabilities potentially enable a malicious party to perform...

owl-sanitizer-data-quality (>=0.1.0, <=0.5.0), pyrasterframes (0.9.0) +2 more potentially affected by CVE-2022-33891 via pyspark (2.4.5)

pyspark PYPI version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - owl-sanitizer-data-quality =0.1.0, =0.3.1, =0.3.15 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

owl-sanitizer-data-quality (>=0.1.0, <=0.5.0), pyrasterframes (0.9.0) +2 more potentially affected by CVE-2022-33891 via pyspark (2.4.5)

pyspark PYPI version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - owl-sanitizer-data-quality =0.1.0, =0.3.1, =0.3.15 Source cves: CVE-2022-33891 Source advisory: OSV:PYSEC-2022-236...

Malicious Package

Overview wm-ngx-graph is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

[SECURITY] Fedora 35 Update: asciigraph-0.5.5-2.fc35

Go package to make lightweight ASCII line graph =EF=BF=BD=EF=BF=BD=EF=BF=BD =EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD in command line apps w ith no other dependencies...

GO-2022-0300 Panic via malicious inputs in github.com/graph-gophers/graphql-go

Malicious inputs can cause a panic. A maliciously crafted input can cause a stack overflow and panic. Any user with access to the GraphQL can send such a query. This issue only occurs when using the graphql.MaxDepth schema option which is highly recommended in most cases...

How To Configure Veeam Backup for Microsoft 365 to Use Microsoft Graph Export API for Teams

Purpose This article documents the procedure for enabling Veeam Backup for Microsoft 365 to backup Teams public channel posts using the Teams Export APIs.Veeam Backup for Microsoft 365 backs up Teams channel messages. For more information on the limitations of Teams chat backup, click here. In...

Fedora: Security Advisory for asciigraph (FEDORA-2022-ba365d3703)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...