Malcolm

Malcolm Malcolm は、以下の目標を念頭に設計された強力なネットワークトラフィック解析ツールスイートです。 使いやすさ – Malcolm は、フルパケットキャプチャ PCAP ファイル、Zeek ログ、Suricata アラートの形でネットワークトラフィックデータを受け入れます。これらのアーティファクトは、シンプルなブラウザベースのインターフェースを介してアップロードするか、軽量フォワーダを使用して受動的にキャプチャして Malcolm に転送できます。いずれの場合も、データは自動的に正規化、エンリッチメント、および相関が行われ、分析に利用できるようになります。...

CVE-2026-84367 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-84368 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-6W3J-5FW6-R9VR vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-GG4H-3HG2-GRPC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, opensearch-dashboards, prism, nextcloud-server, langfuse, jitsucom-jitsu, lerna...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, opensearch-dashboards, prism, nextcloud-server, langfuse, jitsucom-jitsu, lerna...

CVE-2026-84942

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942

This stored cross-site scripting (XSS) vulnerability affects OpenSearch Dashboards . The root cause is a flaw in the checkForFunctionProperty validation routine within the Vega expression function, which failed to recurse into arrays of objects, allowing a function property nested inside an array...

CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

EUVD-2026-74074

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

PT-2026-88317

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

GHSA-JQFF-G426-HQXP vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, tileserver-gl, tileserver-gl-fips, vitess, keep-fips, kibana, langfuse, gitlab-rails-ce-fips, gitlab-rails-ce, unleash, tensorflow-gpu-jupyter, opensearch-dashboards, prism, nextcloud-server, yaml-language-server, langfuse-fips, arangodb,...

GHSA-FPH4-WMHF-6FWF vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, tileserver-gl, tileserver-gl-fips, vitess, keep-fips, kibana, langfuse, gitlab-rails-ce-fips, unleash, tensorflow-gpu-jupyter, opensearch-dashboards, prism, nextcloud-server, yaml-language-server, langfuse-fips, arangodb, wazuh-dashboard-fips,...

GHSA-F65P-4M7J-42XC vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, tileserver-gl, tileserver-gl-fips, vitess, keep-fips, kibana, langfuse, gitlab-rails-ce-fips, gitlab-rails-ce, unleash, tensorflow-gpu-jupyter, opensearch-dashboards, prism, nextcloud-server, yaml-language-server, langfuse-fips, arangodb,...

GHSA-5JGF-P345-68V8 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, tileserver-gl, tileserver-gl-fips, vitess, keep-fips, kibana, langfuse, gitlab-rails-ce-fips, unleash, opensearch-dashboards, prism, nextcloud-server, yaml-language-server, langfuse-fips, arangodb, wazuh-dashboard-fips, unleash-fips,...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, code-server, tileserver-gl, tileserver-gl-fips, sqlpad, kubescape-grype-offline-db, kibana, langfuse, pelias-api, renovate, gitlab-rails-ce, unleash, kubeflow-centraldashboard, opensearch-dashboards, prism, langfuse-fips, dotstatsuite-supercore,...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, code-server, tileserver-gl, tileserver-gl-fips, sqlpad, kubescape-grype-offline-db, kibana, langfuse, pelias-api, gitlab-rails-ce-fips, renovate, gitlab-rails-ce, unleash, kubeflow-centraldashboard, tensorflow-gpu-jupyter, opensearch-dashboards, pris...

CVE-2026-75899 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, tileserver-gl, tileserver-gl-fips, vitess, keep-fips, kibana, langfuse, gitlab-rails-ce-fips, unleash, tensorflow-gpu-jupyter, opensearch-dashboards, prism, nextcloud-server, yaml-language-server, langfuse-fips, arangodb, wazuh-dashboard-fips,...