1065 matches found
CVE-2026-46718 vulnerabilities
Vulnerabilities for packages: solr-fips, opensearch, hadoop-fips, solr, opensearch-fips...
GHSA-C2RV-HWQM-WJPG vulnerabilities
Vulnerabilities for packages: solr-fips, opensearch, hadoop-fips, solr, opensearch-fips...
CVE-2026-46718 vulnerabilities
Vulnerabilities for packages: opensearch...
GHSA-C2RV-HWQM-WJPG vulnerabilities
Vulnerabilities for packages: opensearch...
CVE-2026-65899 vulnerabilities
Vulnerabilities for packages: langfuse, kibana, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, langfuse-fips, gitlab-rails-ce-fips, opensearch-dashboards, librechat, nextcloud-server...
CVE-2026-65903 vulnerabilities
Vulnerabilities for packages: langfuse, kibana, wazuh-dashboard, wazuh-dashboard-fips, langfuse-fips, opensearch-dashboards, librechat, opensearch-dashboards-fips, nextcloud-server...
CVE-2026-65898 vulnerabilities
Vulnerabilities for packages: langfuse, kibana, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, langfuse-fips, gitlab-rails-ce-fips, opensearch-dashboards, librechat, opensearch-dashboards-fips, nextcloud-server...
CVE-2026-65903 vulnerabilities
Vulnerabilities for packages: langfuse, nextcloud-server, opensearch-dashboards...
CVE-2026-65899 vulnerabilities
Vulnerabilities for packages: langfuse, nextcloud-server, opensearch-dashboards...
EUVD-2026-46513
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch Dashboards. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
CVE-2026-47026
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch Dashboards. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
CLEANSTART-2026-OI70918 Security fixes for CVE-2026-33870, CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-41417, CVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585, ghsa-2c5c-chwr-9hqw, ghsa-38f8-5428-x5cv, ghsa-72hv-8253-57qq, ghsa-f6hv-jmp6-3vwv, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-pwqr-wmgm-9rr8 applied in versions: 2.19.5-r0, 3.6.0-r4
Multiple security vulnerabilities affect the opensearch package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-KT42152 Security fixes for CVE-2026-12143, CVE-2026-44979, CVE-2026-45249, CVE-2026-46625, CVE-2026-53550, CVE-2026-53655, ghsa-cmwh-pvxp-8882 applied in versions: 3.6.0-r4
Multiple security vulnerabilities affect the opensearch-dashboards-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
PT-2026-62010
Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, safe-extract.py extracts uploaded archives with no limit on entry count, directory depth, total entries, or output size. A small malicious archive containing a large number of directory or file entries causes the filebeat...
PT-2026-62011
Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, safe-extract.py protects file extraction with libarchive's secure flags, but creates directory entries with a raw os.makedirsos.path.joindest, entry.pathname that has no traversal protection. An uploaded malicious archive...
CVE-2026-47026: URL Redirection to Untrusted Site
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch Dashboards. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...
CVE-2026-56699
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Per Wazuh's Security Policy, vulnerabilities affecting only non-GA versions are not eligible for a CVE ID...
CVE-2026-56699
The Wazuh Manager is vulnerable to NDJSON Injection in the inventory_sync() function within the cluster synchronization component. This occurs because the software fails to escape the DataValue.index field when constructing OpenSearch bulk requests. An attacker operating remotely can leverage thi...
EUVD-2026-44630
Wazuh Manager before 5.0.0-beta3 fails to escape the DataValue.index field when constructing OpenSearch bulk requests, allowing enrolled agents to inject arbitrary NDJSON operations. Attackers can smuggle delete, index, or update operations into bulk requests executed under the manager's admin...
