Lucene search
+L

846 matches found

EUVD
EUVD
added 2025/11/25 9:32 p.m.11 views

EUVD-2025-199644

A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions below 3.2.0...

8.3CVSS6.3AI score0.00506EPSS
SaveExploits1References3
OSV
OSV
added 2025/11/25 9:32 p.m.10 views

GHSA-MW3V-MMFW-3X2G OpenSearch is vulnerable to DoS via complex query_string inputs

A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions below 2.19.4 and versions 3.0.0 through 3.2.0...

8.3CVSS5.9AI score0.00506EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
added 2025/11/25 9:32 p.m.20 views

OpenSearch is vulnerable to DoS via complex query_string inputs

A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions below 2.19.4 and versions 3.0.0 through 3.2.0...

8.3CVSS6.5AI score0.00506EPSS
SaveExploits1References8Affected Software1
Snyk
Snyk
added 2025/11/25 8:41 p.m.4 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the querystring processing. An attacker can exhaust system resources and disrupt service availability by submitting excessively long Boolean or disjunction queries. PoC GET search "query": "querystring":...

8.3CVSS6.6AI score0.00506EPSS
SaveExploits1References2
NVD
NVD
added 2025/11/25 8:16 p.m.17 views

CVE-2025-9624

A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions between 3.0.0 and 3.3.0 and OpenSearch 2.19.4...

8.3CVSS0.00506EPSS
SaveExploits1References3
OSV
OSV
added 2025/11/25 8:16 p.m.7 views

UBUNTU-CVE-2025-9624

A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions between 3.0.0 and 3.3.0 and OpenSearch 2.19.4...

8.3CVSS5.8AI score0.00506EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/11/25 7:43 p.m.29 views

CVE-2025-9624 OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS

A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions between 3.0.0 and 3.3.0 and OpenSearch 2.19.4...

8.3CVSS0.00506EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2025/11/25 7:43 p.m.19 views

CVE-2025-9624

A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions between 3.0.0 and 3.3.0 and OpenSearch 2.19.4...

8.3CVSS5.3AI score0.00506EPSS
SaveExploits1
OSV
OSV
added 2025/11/25 7:43 p.m.27 views

CVE-2025-9624 OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS

A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions between 3.0.0 and 3.3.0 and OpenSearch 2.19.4...

8.3CVSS7.1AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/11/25 7:43 p.m.9 views

CVE-2025-9624 OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS

A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions between 3.0.0 and 3.3.0 and OpenSearch 2.19.4...

8.3CVSS6.1AI score0.00506EPSS
SaveExploits1References3
CVE
CVE
added 2025/11/25 7:43 p.m.70 views

CVE-2025-9624

OpenSearch CVE-2025-9624: A DoS vulnerability via complex query_string inputs affects OpenSearch 3.0.0–3.2.x and OpenSearch

8.3CVSS6.1AI score0.00506EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2025/11/25 12:00 a.m.12 views

OpenSearch 安全漏洞

OpenSearch is a distributed search and analysis software from OpenSearch open source. A security vulnerability exists in OpenSearch versions prior to 3.2.0 that stems from improper handling of complex querystring inputs, which could lead to a denial of service attack...

8.3CVSS6.2AI score0.00506EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/11/25 12:00 a.m.7 views

PT-2025-48080

Name of the Vulnerable Software and Affected Versions OpenSearch versions prior to 3.2.0 Description A flaw exists in OpenSearch that enables attackers to trigger a Denial of Service DoS condition. This is achieved by providing complex query string inputs. Recommendations Update to version 3.2.0 ...

8.3CVSS6.5AI score0.00506EPSS
SaveExploits1References20
Wolfi
Wolfi
added 2025/10/31 7:59 a.m.6 views

CVE-2025-12194 vulnerabilities

Vulnerabilities for packages: opensearch...

5.9CVSS6.7AI score0.00145EPSS
SaveExploits0
Wolfi
Wolfi
added 2025/10/31 7:59 a.m.3 views

GHSA-JV6H-4262-Q663 vulnerabilities

Vulnerabilities for packages: opensearch...

7AI score
SaveExploits0
Chainguard
Chainguard
added 2025/10/31 7:17 a.m.5 views

GHSA-JV6H-4262-Q663 vulnerabilities

Vulnerabilities for packages: logstash-fips, guacamole-client, bouncycastle-fips, opensearch...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2025/10/31 7:17 a.m.19 views

CVE-2025-12194 vulnerabilities

Vulnerabilities for packages: logstash-fips, guacamole-client, bouncycastle-fips, opensearch...

5.9CVSS6AI score0.00145EPSS
SaveExploits0
NCSC
NCSC
added 2025/10/23 2:13 p.m.26 views

Vulnerabilities fixed in Oracle PeopleSoft

Oracle has fixed vulnerabilities in Oracle PeopleSoft Specifically for versions 8.60, 8.61, 8.62 and 9.2. The vulnerabilities in Oracle PeopleSoft allow attackers to gain unauthorized access to sensitive data and can lead to data manipulation. This includes vulnerabilities that allow both low- an...

9.4CVSS7AI score0.0227EPSS
SaveExploits15References1
RedhatCVE
RedhatCVE
added 2025/10/22 8:18 p.m.10 views

CVE-2025-53059

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch Dashboards. Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSof...

4.9CVSS5.5AI score0.00349EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/21 8:20 p.m.14 views

CVE-2025-53059

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch Dashboards. Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSof...

4.9CVSS0.00349EPSS
SaveExploits0References1
Rows per page
Query Builder