895 matches found
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
OpenSearch Dashboards Reports 安全漏洞
OpenSearch Dashboards Reports is an OpenSearch open source application. It is used to export and automate PNG, PDF and CSV reports in OpenSearch Dashboard. A security vulnerability exists in OpenSearch Dashboards Reports version 2.19, which stems from the Dashboards Reports module containing a...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
PT-2025-6715 · Unknown +2 · Opensearch +3
Name of the Vulnerable Software and Affected Versions: dashboards-reporting versions prior to 2.19.0.0 OpenSearch versions prior to 2.19 Description: The issue allows cross-site scripting XSS because Markdown is not sanitized when previewing a header or footer. This occurs in dashboards-reporting...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
GHSA-76P7-773F-R4Q5 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, drupal, arangodb, opensearch-dashboards...
CVE-2024-11831 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, drupal, arangodb, opensearch-dashboards...
The vulnerability of the OpenSearch component in the PeopleSoft Enterprise PeopleTools business application suite allows a attacker to cause a system crash or trigger a service failure.
The vulnerability of the OpenSearch component in the PeopleSoft Enterprise PeopleTools business application suite is related to the exhaustion of memory resources. Exploiting this vulnerability can allow an attacker to cause a system crash or trigger service failures through HTTP requests...
CVE-2025-21545
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch. Supported versions that are affected are 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2022-41906
OpenSearch Notifications is a notifications plugin for OpenSearch that enables other plugins to send notifications via Email, Slack, Amazon Chime, Custom web-hook etc channels. A potential SSRF issue in OpenSearch Notifications Plugin starting in 2.0.0 and prior to 2.2.1 could allow an existing...
CVE-2022-35980
OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Versions 2.0.0.0 and 2.1.0.0 of the security plugin are affected by an information disclosure vulnerability. Requests to an OpenSearch cluster configured with advanced access control features...
CVE-2025-23671
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sav WP OpenSearch wp-opensearch allows Stored XSS.This issue affects WP OpenSearch: from n/a through = 1.0...
CVE-2025-23671
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sav WP OpenSearch wp-opensearch allows Stored XSS.This issue affects WP OpenSearch: from n/a through = 1.0...
CVE-2025-23671 WordPress WP OpenSearch plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fabio Savina WP OpenSearch allows Stored XSS. This issue affects WP OpenSearch: from n/a through 1.0...
CVE-2025-23671 WordPress WP OpenSearch plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sav WP OpenSearch wp-opensearch allows Stored XSS.This issue affects WP OpenSearch: from n/a through = 1.0...
CVE-2025-23671
CVE-2025-23671 corresponds to a Stored XSS in the WP OpenSearch WordPress plugin (Fabio Savina) affecting WP OpenSearch versions n/a through 1.0. The Red Hat and CVE listings corroborate the issue as a cross-site scripting flaw arising from improper neutralization of input during web page generat...
PT-2025-5009 · WordPress · Wp Opensearch
Name of the Vulnerable Software and Affected Versions: WP OpenSearch versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...
WordPress plugin WP OpenSearch 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
