853 matches found
CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS
CVE-2024-54160-Opensearch-Iniezione HTML + XSS persistente È stato riscontrato che il plugin Opensearch chiamato "reports" era vulnerabile all'iniezione HTML nella versione 2.18.0. La funzionalità di report consentiva agli utenti di memorizzare HTML nell'intestazione e nel piè di pagina durante l...
pySigma-backend-opensearch
pySigma OpenSearch Backend Dies ist das OpenSearch-Backend für pySigma. Es stellt das Paket sigma.backends.opensearch mit zwei Backend-Klassen bereit: OpensearchLuceneBackend - Konvertiert Sigma-Regeln in die Lucene-Abfragesyntax OpenSearchPPLBackend - Konvertiert Sigma-Regeln in PPL-Abfragen...
Malcolm
Malcolm Malcolm è una potente suite di strumenti per l'analisi del traffico di rete, progettata con i seguenti obiettivi: Facile da usare – Malcolm accetta dati di traffico di rete sotto forma di file di cattura completa dei pacchetti PCAP, log Zeek e avvisi Suricata. Questi artefatti possono...
SecurityClaw
SecurityClaw — Framework Agente Autonomo per SOC Un agente autonomo per il Security Operations Center SOC, modulare e basato su competenze, che monitora i dati di OpenSearch/Elasticsearch, costruisce una memoria comportamentale basata su RAG e convalida le anomalie in tempo reale utilizzando LLM...
CVE-Wazuh
Wazuh Manager — Iniezione NDJSON in inventorysync tramite DataValue.index controllato dall'agente - Bozza Un agente registrato può introdurre operazioni arbitrarie bulk di OpenSearch tramite DataValue.index. GHSA-ff9g-85jq-r3g3 ⚡ Uso Semplice Usa questo progetto solo in ambienti sicuri e...
CVE-2026-77811
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
EUVD-2026-64129
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
CVE-2026-77811 Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
CVE-2026-77811 Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
CVE-2026-77811
CVE-2026-77811 is a stored cross-site scripting (XSS) vulnerability in the dashboards-observability plugin of OpenSearch Dashboards . The root cause is improper input validation , which allows a remote authenticated user with write permissions to saved objects to upload a saved asset containing a...
CVE-2026-18420
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
EUVD-2026-63592
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
CVE-2026-18420
Improper input validation in OpenSearch Dashboards' TSVB plugin enables prototype pollution via crafted JSON to the metrics visualization API, yielding authenticated remote code execution. CVSS 3.1 scores 8.8 (HIGH). Affected versions are fixed in OpenSearch Dashboards 3.8.0. Exploitation in the ...
CVE-2026-18420 RCE via Prototype Pollution in OpenSearch Dashboards
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
CVE-2026-18420 RCE via Prototype Pollution in OpenSearch Dashboards
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
CVE-2026-59711 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards...
CVE-2026-59710 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards...
GHSA-CR32-G25G-VXJJ vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards...
