Lucene search
+L

535 matches found

Cvelist
Cvelist
added 2024/03/31 6:0 a.m.27 views

CVE-2015-10131 chrisy TFO Graphviz Plugin tfo-graphviz-admin.php admin_page cross site scripting

A vulnerability was found in chrisy TFO Graphviz Plugin up to 1.9 on WordPress and classified as problematic. Affected by this issue is the function adminpageload/adminpage of the file tfo-graphviz-admin.php. The manipulation leads to cross site scripting. The attack may be launched remotely...

4CVSS3.8AI score0.00491EPSS
Exploits0References4
CVE
CVE
added 2024/03/31 6:0 a.m.60 views

CVE-2015-10131

CVE-2015-10131 affects the chrisy TFO Graphviz Plugin for WordPress (up to version 1.9). The vulnerability targets the admin_page_load/admin_page function in tfo-graphviz-admin.php, enabling cross-site scripting that can be triggered remotely. A fix is available in version 1.10, and the patch is ...

4CVSS3.7AI score0.00491EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/03/31 12:0 a.m.4 views

WordPress plugin TFO Graphviz 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4CVSS4.5AI score0.00491EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/03/31 12:0 a.m.6 views

PT-2024-10564 · Unknown · Chrisy Tfo Graphviz Plugin

Name of the Vulnerable Software and Affected Versions: chrisy TFO Graphviz Plugin versions up to 1.9 Description: A vulnerability was found in the chrisy TFO Graphviz Plugin, which is classified as problematic. The issue affects the function admin page load/admin page of the file...

4CVSS4.2AI score0.00491EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2024/03/22 12:0 a.m.14 views

Ubuntu: Security Advisory (USN-6708-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.00712EPSS
Exploits1References2
Ubuntu
Ubuntu
added 2024/03/21 12:20 p.m.81 views

USN-6708-1: Graphviz vulnerability

It was discovered that Graphviz incorrectly handled certain config6a files. An attacker could possibly use this issue to cause a denial of service...

7.8CVSS7.2AI score0.00712EPSS
Exploits1
OSV
OSV
added 2024/03/21 12:20 p.m.4 views

USN-6708-1 graphviz vulnerability

It was discovered that Graphviz incorrectly handled certain config6a files. An attacker could possibly use this issue to cause a denial of service...

7.8CVSS5.8AI score0.00712EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/03/21 12:0 a.m.41 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Graphviz vulnerability (USN-6708-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6708-1 advisory. It was discovered that Graphviz incorrectly handled certain config6a files. An attacker could possibly use this...

7.8CVSS7.3AI score0.00712EPSS
Exploits1References2
CBLMariner
CBLMariner
added 2024/03/19 5:21 p.m.16 views

CVE-2020-18032 affecting package graphviz for versions less than 2.42.4-10

CVE-2020-18032 affecting package graphviz for versions less than 2.42.4-10. A patched version of the package is available...

7.8CVSS7.9AI score0.02608EPSS
Exploits1
OSV
OSV
added 2024/02/23 11:7 a.m.2 views

OESA-2024-1209 graphviz security update

Graphviz is open source graph visualization software. Graph visualization is a way of representing structural information as diagrams of abstract graphs and networks. It has important applications in networking, bioinformatics, software engineering, database and web design, machine learning, and ...

7.8CVSS6.6AI score0.00712EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/02/20 12:0 a.m.26 views

Amazon Linux 2023 : graphviz, graphviz-devel, graphviz-gd (ALAS2023-2024-527)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-527 advisory. buffer overflow via a crafted config6a file NOTE: Crosses no security boundary, config files are under local controlNOTE: https://gitlab.com/graphviz/graphviz/-/issues/2441NOTE: Introduced by:...

7.8CVSS7.5AI score0.00712EPSS
Exploits1References4
Amazon
Amazon
added 2024/02/19 12:0 a.m.8 views

Medium: graphviz

Issue Overview: buffer overflow via a crafted config6a file NOTE: Crosses no security boundary, config files are under local control NOTE: https://gitlab.com/graphviz/graphviz/-/issues/2441 NOTE: Introduced by: https://gitlab.com/graphviz/graphviz/-/commit/cf95714837f06f684929b54659523c2c9b1fc19f...

7.8CVSS6.9AI score0.00712EPSS
Exploits1
Amazon
Amazon
added 2024/02/19 12:0 a.m.6 views

Medium: graphviz

Issue Overview: buffer overflow via a crafted config6a file NOTE: Crosses no security boundary, config files are under local control NOTE: https://gitlab.com/graphviz/graphviz/-/issues/2441 NOTE: Introduced by: https://gitlab.com/graphviz/graphviz/-/commit/cf95714837f06f684929b54659523c2c9b1fc19f...

7.8CVSS6.8AI score0.00712EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2024/02/16 12:0 a.m.6 views

PT-2024-40577 · Boost · Boost

Name of the Vulnerable Software and Affected Versions: boost affected versions not specified Description: The issue is related to a stack-overflow crash. Technical details about the crash include the involvement of specific function names such as parse subgraph, parse endpoint rest, and parse stm...

6.8AI score
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2024/02/10 8:0 a.m.4 views

Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.

...

7.8CVSS7.2AI score0.00712EPSS
Exploits1
SUSE CVE
SUSE CVE
added 2024/02/03 3:46 a.m.5 views

SUSE CVE-2023-46045

Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root...

3.4CVSS6.8AI score0.00712EPSS
Exploits1References5
Veracode
Veracode
added 2024/02/02 7:38 p.m.16 views

Denial Of Service

graphviz is vulnerable Denial Of Service. The vulnerability is due to improper handling of input files, leading to the possibility of reading beyond the allocated memory...

7.8CVSS6.7AI score0.00712EPSS
Exploits1References6Affected Software1
Chainguard
Chainguard
added 2024/02/02 6:15 a.m.24 views

CVE-2023-46045 vulnerabilities

Vulnerabilities for packages: graphviz...

7.8CVSS7.3AI score0.00712EPSS
Exploits1
Wolfi
Wolfi
added 2024/02/02 6:15 a.m.31 views

CVE-2023-46045 vulnerabilities

Vulnerabilities for packages: graphviz...

7.8CVSS7.2AI score0.00712EPSS
Exploits1
NVD
NVD
added 2024/02/02 6:15 a.m.8 views

CVE-2023-46045

Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root...

7.8CVSS7.3AI score0.00712EPSS
Exploits1References8
Rows per page
Query Builder