GHSA-QMGX-J96G-4428 vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2024-28752 vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2024-28752 vulnerabilities

Vulnerabilities for packages: opensearch...

opensearch.sydneyuniversitypress.com.au Cross Site Scripting vulnerability OBB-3864538

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-4265-CCF5-PHJ5 vulnerabilities

Vulnerabilities for packages: gradle, trino, tez, spdx-tools-java, opensearch, dependency-track, celeborn, wavefront-proxy, druid...

GHSA-4265-CCF5-PHJ5 vulnerabilities

Vulnerabilities for packages: kayenta, spdx-tools-java, wavefront-proxy, hadoop-client-modules, celeborn, gradle, dependency-track, kayenta-fips, trino, druid, tez, hadoop-fips, opensearch...

GHSA-4G9R-VXHX-9PGX vulnerabilities

Vulnerabilities for packages: gradle, trino, tez, spdx-tools-java, opensearch, dependency-track, celeborn, wavefront-proxy, druid...

CVE-2024-26308 vulnerabilities

Vulnerabilities for packages: gradle, trino, tez, spdx-tools-java, opensearch, dependency-track, celeborn, wavefront-proxy, druid...

CVE-2024-26308 vulnerabilities

Vulnerabilities for packages: kayenta, spdx-tools-java, wavefront-proxy, hadoop-client-modules, celeborn, gradle, dependency-track, kayenta-fips, trino, druid, tez, hadoop-fips, opensearch...

CVE-2024-25710 vulnerabilities

Vulnerabilities for packages: gradle, trino, tez, spdx-tools-java, opensearch, dependency-track, celeborn, wavefront-proxy, druid...

CVE-2024-25710 vulnerabilities

Vulnerabilities for packages: kayenta, spdx-tools-java, wavefront-proxy, hadoop-client-modules, celeborn, gradle, dependency-track, kayenta-fips, trino, druid, tez, hadoop-fips, opensearch...

CVE-2024-21634 vulnerabilities

Vulnerabilities for packages: wavefront-proxy...

GHSA-264P-99WQ-F4J6 vulnerabilities

Vulnerabilities for packages: wavefront-proxy...

GHSA-JCHW-25XP-JWWC vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, opensearch-dashboards, configurable-http-proxy, kibana, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, arangodb...

GHSA-JCHW-25XP-JWWC vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, configurable-http-proxy, lerna...

CVE-2023-26159 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, opensearch-dashboards, configurable-http-proxy, kibana, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, arangodb...

CVE-2023-26159 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, configurable-http-proxy, lerna...

Expanded Coverage and AWS Compliance Pack Updates in InsightCloudSec Coming Out of AWS Re:Invent 2023

It seems like it was just yesterday that we were in Las Vegas for AWS Re:Invent, but it’s already been almost two weeks since the conference wrapped up. As is always the case, AWS unveiled a host of new services throughout the week, including advancements around serverless, artificial intelligenc...

PT-2023-9839 · Oracle · Peoplesoft Enterprise Peopletools

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.59 through 8.61 Description: The issue exists due to insufficient input validation in the OpenSearch Dashboards component. It allows a remote attacker to gain unauthorized access to protected...

GHSA-6G3J-P5G6-992F OpenSearch StackOverflow vulnerability

Impact A flaw was discovered in OpenSearch, affecting the search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service. The issue was identified by Elastic Engineering and corresponds to security advisory ESA-2023-14 CVE-2023-31419...