GHSA-JCRP-X7W3-FFMG vulnerabilities

Vulnerabilities for packages: opensearch...

GHSA-JCRP-X7W3-FFMG vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2025-0851 vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2025-0851 vulnerabilities

Vulnerabilities for packages: opensearch...

The vulnerability of the OpenSearch Dashboards component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the OpenSearch Dashboards component in the Oracle PeopleSoft Enterprise PeopleTools business application suite exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information using...

PT-2025-4267

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.60 through 8.61 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, resulting in the unauthorized ability to cause ...

CVE-2025-21545: Uncontrolled Resource Consumption

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch. Supported versions that are affected are 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Exploit for CVE-2024-54160

CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It w...

CVE-2024-55886

OpenSearch Data Prepper is a component of the OpenSearch project that accepts, filters, transforms, enriches, and routes data at scale. A vulnerability exists in the OpenTelemetry Logs source in Data Prepper starting inversion 2.1.0 and prior to version 2.10.2 where some custom authentication...

CVE-2024-55886

OpenSearch Data Prepper is a component of the OpenSearch project that accepts, filters, transforms, enriches, and routes data at scale. A vulnerability exists in the OpenTelemetry Logs source in Data Prepper starting inversion 2.1.0 and prior to version 2.10.2 where some custom authentication...

CVE-2024-55886

The CVE affects OpenSearch Data Prepper (OpenTelemetry Logs source) where custom GrpcAuthenticationProvider plugins that implement getHttpAuthenticationService() instead of getAuthenticationInterceptor() fail to perform authentication, allowing unauthorized data ingestion. Affected versions: 2.1....

CVE-2024-55886 OpenTelemetry Logs source may lack authentication with some custom plugins

OpenSearch Data Prepper is a component of the OpenSearch project that accepts, filters, transforms, enriches, and routes data at scale. A vulnerability exists in the OpenTelemetry Logs source in Data Prepper starting inversion 2.1.0 and prior to version 2.10.2 where some custom authentication...

PT-2024-36601

Name of the Vulnerable Software and Affected Versions OpenSearch Data Prepper versions 2.1.0 through 2.10.1 Description A vulnerability exists in the OpenTelemetry Logs source in Data Prepper where some custom authentication plugins will not perform authentication, allowing unauthorized users to...

OpenSearch Data Prepper 授权问题漏洞

OpenSearch Data Prepper is a component of the OpenSearch project, an OpenSearch open source project. An authorization issue vulnerability exists in OpenSearch Data Prepper version 2.1.0 through versions prior to 2.10.2, which stems from a vulnerability in which certain custom authentication...

CVE-2024-55886: Improper Authentication

OpenSearch Data Prepper is a component of the OpenSearch project that accepts, filters, transforms, enriches, and routes data at scale. A vulnerability exists in the OpenTelemetry Logs source in Data Prepper starting inversion 2.1.0 and prior to version 2.10.2 where some custom authentication...

The vulnerability of the OpenSearch software package lies in the ability to redirect users to unreliable websites, allowing attackers to redirect users to malicious sites.

The vulnerability of the OpenSearch software package is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to a malicious website remotely...

CVE-2024-21538 vulnerabilities

Vulnerabilities for packages: argo-workflows, airflow, py3-captum, opensearch-dashboards, tileserver-gl-fips, lerna, kibana, ts-patch, eslint, arangodb, tileserver-gl, graalvm, node-gyp, pgadmin4, renovate, opensearch-dashboards-fips, sqlpad, kubeflow-katib...

ROS-20241029-08

Vulnerability in the OpenSearch software package related to improper validation of the nextUrl parameter. Exploitation of the vulnerability could allow an attacker to redirect a user to a malicious site A vulnerability in the server.maxHeadersCount configuration of the ws client-server library in...

CVE-2024-47875 vulnerabilities

Vulnerabilities for packages: argo-workflows, opensearch-dashboards-fips...

GHSA-PXG6-PF52-XH8X vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, thingsboard, opensearch-dashboards, kubeflow-centraldashboard, sqlpad, kibana, arangodb, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, opensearch-dashboards-fips, gitlab-rails-ce, jitsucom-jitsu...