Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-78379 |
|
Vulnerability in Amazon aws (CVE-2026-78379)
vulnerability in Amazon aws (CVE-2026-78379). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77811 |
|
Cross-Site Scripting (XSS) in Amazon aws (CVE-2026-77811)
cross-site scripting in Amazon aws (CVE-2026-77811). Confidential information can be exposed externally.
|
| CVE-2026-75935 |
|
Vulnerability in Amazon aws (CVE-2026-75935)
vulnerability in Amazon aws (CVE-2026-75935). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19642 |
|
Out-of-Bounds Write in Amazon aws (CVE-2026-19642)
out-of-bounds write in Amazon aws (CVE-2026-19642). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16796 |
|
Vulnerability in Amazon bedrock-agentcore (CVE-2026-16796)
vulnerability in Amazon bedrock-agentcore (CVE-2026-16796). Confidential information can be exposed externally. Mitigation: upgrade to `1.18.1` or later.
|
| CVE-2026-15957 |
|
Vulnerability in Amazon aws (CVE-2026-15957)
vulnerability in Amazon aws (CVE-2026-15957). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15737 |
|
Vulnerability in Amazon aws (CVE-2026-15737)
vulnerability in Amazon aws (CVE-2026-15737). Confidential information can be exposed externally.
|
| CVE-2026-15746 |
|
SSRF (Server-Side Request Forgery) in Amazon aws (CVE-2026-15746)
SSRF in Amazon aws (CVE-2026-15746). Confidential information can be exposed externally. Exploitable via `Authorization header`.
|
| CVE-2026-14265 |
|
Unsafe Deserialization in Amazon aws (CVE-2026-14265)
vulnerability in Amazon aws (CVE-2026-14265). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12530 |
|
Vulnerability in Amazon bedrock-agentcore (CVE-2026-12530)
vulnerability in Amazon bedrock-agentcore (CVE-2026-12530). Confidential information can be exposed externally. Mitigation: upgrade to `1.6.1` or later.
|
| CVE-2026-12043 |
|
Vulnerability in Amazon aws (CVE-2026-12043)
vulnerability in Amazon aws (CVE-2026-12043). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11393 |
|
Code Injection in Amazon @aws/agentcore (CVE-2026-11393)
code injection in Amazon @aws/agentcore (CVE-2026-11393). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.0.0-preview.9` or later.
|
| CVE-2026-11400 |
|
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
|
| CVE-2026-8838 |
|
Code Injection in Amazon redshift-connector (CVE-2026-8838)
code injection in Amazon redshift-connector (CVE-2026-8838). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.14` or later.
|
| CVE-2026-8596 |
|
Vulnerability in Amazon sagemaker (CVE-2026-8596)
vulnerability in Amazon sagemaker (CVE-2026-8596). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.8.0` or later.
|
| CVE-2026-5190 |
|
Out-of-Bounds Write in Amazon aws (CVE-2026-5190)
out-of-bounds write in Amazon aws (CVE-2026-5190). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44313 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-44313)
SSRF in ssrf (CVE-2026-44313). Confidential information can be exposed externally. Exploitable via `GET /api/v1/archives/{linkId}`.
|
| CVE-2026-42193 |
|
Vulnerability in aws (CVE-2026-42193)
vulnerability in aws (CVE-2026-42193). Data can be tampered with by attackers.
|
| CVE-2025-4318 |
|
Vulnerability in Amazon @aws-amplify/codegen-ui-react (CVE-2025-4318)
vulnerability in Amazon @aws-amplify/codegen-ui-react (CVE-2025-4318). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.20.3` or later.
|