992 matches found
GHSA-GM9P-3W2C-C6QG vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp, linux-aws...
GHSA-5R3H-V82J-R7RR vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp, linux-aws...
GHSA-4PQW-3H25-QRQ3 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp, linux-aws...
GHSA-5Q2P-7748-G6QP vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp, linux-aws...
GHSA-J962-FX34-5263 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp, linux-aws...
GHSA-QHPR-79XW-32M8 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp, linux-aws...
GHSA-Q6QM-26CH-2W94 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp, linux-aws...
GHSA-PW9R-H2M6-6VVG vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp, linux-aws...
CVE-2026-13769
A flaw was found in AWS CLI. Overly permissive file permissions on Unix-like systems, where the umask has not been configured to restrict file permissions, may allow other local users on the same host to read credentials. This occurs when certain AWS CLI subcommands, such as aws codeartifact logi...
CVE-2026-56140
A flaw was found in the Apache Camel AWS SNS component camel-aws2-sns. An improper input validation vulnerability exists in the Sns2HeaderFilterStrategy due to a missing inbound filter rule. However, this component is producer-only, meaning it does not process external messages in a way that woul...
[SECURITY] Fedora 43 Update: rust-reqsign-aws-v4-3.0.1-2.fc43
AWS SigV4 signing implementation for reqsign...
[SECURITY] Fedora 44 Update: rust-reqsign-aws-v4-3.0.1-2.fc44
AWS SigV4 signing implementation for reqsign...
CVE-2026-56140
CVE-2026-56140 describes an improper input validation in the Apache Camel AWS SNS component (camel-aws2-sns) due to a missing inbound filter in Sns2HeaderFilterStrategy. The Red Hat/NVD entries confirm the issue is a defense-in-depth hardening change with no known exploit path because camel-aws2-...
CVE-2026-54430
liboauth2 is vulnerable to Server-Side Request Forgery in oauth2josejwksawsalbresolve function. The AWS ALB verifier reads both signer and kid from the unverified JWT header. If signer matches the configured ARN, kid is appended to albbaseurl without URL encoding or path sanitization, and the HTT...
CVE-2026-54430 Server-Site Request Forgery in liboauth2
liboauth2 is vulnerable to Server-Side Request Forgery in oauth2josejwksawsalbresolve function. The AWS ALB verifier reads both signer and kid from the unverified JWT header. If signer matches the configured ARN, kid is appended to albbaseurl without URL encoding or path sanitization, and the HTT...
CVE-2026-54430 Server-Site Request Forgery in liboauth2
liboauth2 is vulnerable to Server-Side Request Forgery in oauth2josejwksawsalbresolve function. The AWS ALB verifier reads both signer and kid from the unverified JWT header. If signer matches the configured ARN, kid is appended to albbaseurl without URL encoding or path sanitization, and the HTT...
CVE-2026-14265
Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0 might allow an actor with write access to the shared cache infrastructure to execute arbitrary code on application servers that read cached query results via a...
CVE-2026-13316
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
EUVD-2026-40281
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
CVE-2026-13316
Foreman (HTTP proxies: http_proxies_controller, http_proxy) is affected by a flaw that allows SSRF, enabling access to cloud metadata services in AWS/GCP/Azure environments via modified HTTP parameters. Root cause involves unvalidated/test_url parameters in Foreman’s configuration paths. Impact i...