413 matches found
CVE-2024-39900
OpenSearch Dashboards Reports allows ‘Report Owner’ export and share reports from OpenSearch Dashboards. An issue in the OpenSearch reporting plugin allows unintended access to private tenant resources like notebooks. The system did not properly check if the user was the resource author when...
Airflow externalLogUrl Permission Bypass
1. Summary The externalLogUrl endpoint in Airflow’s FastAPI enforces only the weaker Task Instance access permission TASKINSTANCE instead of the intended Task Logs permission TASKLOGS. As a result, low-privileged users who are not authorized to view task logs can still obtain external log access...
GHSA-5GFM-WPXJ-WJGQ vulnerabilities
Vulnerabilities for packages: kibana, jitsucom-jitsu, kubeflow-centraldashboard, argo-workflows, opensearch-dashboards, kubeflow-pipelines, arangodb, gitlab-rails-ce-fips, kubeflow-katib, gitlab-rails-ce, opensearch-dashboards-fips...
CVE-2025-12816 vulnerabilities
Vulnerabilities for packages: kibana, jitsucom-jitsu, kubeflow-centraldashboard, argo-workflows, opensearch-dashboards, kubeflow-pipelines, arangodb, gitlab-rails-ce-fips, kubeflow-katib, gitlab-rails-ce, opensearch-dashboards-fips...
GHSA-554W-WPV2-VW27 vulnerabilities
Vulnerabilities for packages: kibana, jitsucom-jitsu, kubeflow-centraldashboard, argo-workflows, opensearch-dashboards, kubeflow-pipelines, arangodb, gitlab-rails-ce-fips, kubeflow-katib, gitlab-rails-ce, opensearch-dashboards-fips...
CVE-2025-66031 vulnerabilities
Vulnerabilities for packages: kibana, jitsucom-jitsu, kubeflow-centraldashboard, argo-workflows, opensearch-dashboards, kubeflow-pipelines, arangodb, gitlab-rails-ce-fips, kubeflow-katib, gitlab-rails-ce, opensearch-dashboards-fips...
GHSA-65CH-62R8-G69G vulnerabilities
Vulnerabilities for packages: kibana, jitsucom-jitsu, kubeflow-centraldashboard, argo-workflows, opensearch-dashboards, kubeflow-pipelines, arangodb, gitlab-rails-ce-fips, kubeflow-katib, gitlab-rails-ce, opensearch-dashboards-fips...
CVE-2025-66030 vulnerabilities
Vulnerabilities for packages: kibana, jitsucom-jitsu, kubeflow-centraldashboard, argo-workflows, opensearch-dashboards, kubeflow-pipelines, arangodb, gitlab-rails-ce-fips, kubeflow-katib, gitlab-rails-ce, opensearch-dashboards-fips...
Vulnerabilities fixed in Oracle PeopleSoft
Oracle has fixed vulnerabilities in Oracle PeopleSoft Specifically for versions 8.60, 8.61, 8.62 and 9.2. The vulnerabilities in Oracle PeopleSoft allow attackers to gain unauthorized access to sensitive data and can lead to data manipulation. This includes vulnerabilities that allow both low- an...
CVE-2025-53059
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch Dashboards. Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSof...
CVE-2025-53059
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch Dashboards. Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSof...
EUVD-2025-35275
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch Dashboards. Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSof...
EUVD-2024-18894
Malicious code in bioql PyPI...
EUVD-2024-2451
Malicious code in bioql PyPI...
EUVD-2024-40453
Malicious code in bioql PyPI...
GHSA-CPQ7-6GPM-G9RC vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2025-9287 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-95M3-7Q98-8XR5 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...