Lucene search
+L

2305 matches found

OSV
OSV
•added 2026/01/08 10:04 p.m.•192 views

GHSA-J965-2QGJ-VJMQ JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. Per the AWS shared responsibilit...

3.7CVSS6.6AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/01/08 9:52 p.m.•17 views

EUVD-2026-1418

AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value...

6.4AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/01/08 9:52 p.m.•90 views

AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

6.7AI score
SaveExploits0References4Affected Software1
OSV
OSV
•added 2026/01/08 9:52 p.m.•96 views

GHSA-6475-R3VJ-M8VF AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

3.7CVSS6.6AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/01/08 9:46 p.m.•13 views

EUVD-2026-1420

AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value...

6.4AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/01/08 9:46 p.m.•22 views

AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value

Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement has been implemented in th...

6.7AI score
SaveExploits0References4Affected Software100
OSV
OSV
•added 2026/01/08 9:46 p.m.•24 views

GHSA-G59M-GF8J-GJF5 AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value

Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement has been implemented in th...

3.7CVSS5.7AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•25 views

PT-2026-3412

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. Per the AWS shared responsibilit...

3.7CVSS6.6AI score
SaveExploits0References3
GitLab Advisory Database
GitLab Advisory Database
•added 2026/01/08 12:00 a.m.•20 views

AWS SDK for Swift adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

6.7AI score
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/01/08 12:00 a.m.•14 views

EUVD-2026-1440

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the LAN interface. The root account is configured with no password, and administrators cannot disable SSH or enforce authentication via the CLI or web GUI. This allows any LAN-adjacent attacker to...

8.4CVSS7.5AI score0.00235EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•18 views

PT-2026-3409

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

3.7CVSS6.7AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•7 views

PT-2026-6459

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

3.7CVSS5.7AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/03 12:00 a.m.•18 views

PT-2026-37523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the cx25821 dev setup function. The issue occurs when ioremap fails, preventing the release of the memory region previously obtained by cx25821 get resources...

5.5CVSS5.5AI score0.00162EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•11 views

PT-2026-26122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where a shared memory region for statistics reporting between the driver and the Network Interface Card NIC is susceptible to corruption. The NIC...

7.8CVSS6.4AI score0.0012EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•14 views

PT-2026-8191

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc6-next-2026012 Description A flaw exists in the Linux kernel's cgroup/dmem subsystem where a NULL pointer dereference can occur when setting the maximum memory limit. This issue is triggered when...

5.6AI score0.00181EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2025/12/31 12:27 a.m.•11 views

SUSE CVE-2023-54260

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbddestroy will directly return, then the connection info will be leaked. Let's set the smb...

4.7CVSS5.9AI score0.00205EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/12/30 3:30 p.m.•11 views

EUVD-2023-60381

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbddestroy will directly return, then the connection info will be leaked. Let's set the smb...

5.9AI score0.00205EPSS
SaveExploits0References8
NVD
NVD
•added 2025/12/30 1:16 p.m.•19 views

CVE-2023-54260

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbddestroy will directly return, then the connection info will be leaked. Let's set the smb...

0.00205EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2025/12/30 12:15 p.m.•34 views

CVE-2023-54260 cifs: Fix lost destroy smbd connection when MR allocate failed

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbddestroy will directly return, then the connection info will be leaked. Let's set the smb...

0.00205EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2025/12/30 12:15 p.m.•20 views

CVE-2023-54260

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbddestroy will directly return, then the connection info will be leaked. Let's set the smb...

5.9AI score0.00205EPSS
SaveExploits0
Rows per page
Query Builder