CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

16502 matches found

Cvelist•added 2026/05/18 8:15 p.m.•85 views

CVE-2026-8838 Remote Code Execution via eval() Injection in amazon-redshift-python-driver

Unsafe use of Python's eval on server-received data in the vectorin function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary code on the client. To remediate this issue, users should upgrade to version 2.1.14...

9.8CVSS0.00803EPSS

SaveExploits1References3

attackerkb•added 2026/05/18 8:15 p.m.•106 views

CVE-2026-8838

9.8CVSS6.5AI score0.00803EPSS

SaveExploits1References4

Mend•added 2026/05/18 8:15 p.m.•3 views

CVE-2026-8838

9.8CVSS6.5AI score0.00803EPSS

SaveExploits1References10

CVE•added 2026/05/18 8:15 p.m.•82 views

CVE-2026-8838

CVE-2026-8838 affects the amazon-redshift-python-driver prior to 2.1.14. The issue arises from unsafe use of Python’s eval() on server-received data in the vector_in() function, enabling a rogue server or man-in-the-middle actor to execute arbitrary code on the client. Affected component: amazon-...

9.8CVSS6.5AI score0.00803EPSS

SaveExploits1References3

OSV•added 2026/05/18 2:00 p.m.•17 views

CLEANSTART-2026-SW24654 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283 applied in versions: 3.2.1-r0

Multiple security vulnerabilities affect the aws-load-balancer-controller package. These issues are resolved in later releases. See references for individual vulnerability details...

7.5CVSS7.1AI score0.00621EPSS

SaveExploits0References9

OSV•added 2026/05/18 1:36 p.m.•14 views

CLEANSTART-2026-ZT52058 Security fixes for ghsa-xmrv-pmrh-hhx2 applied in versions: 1.3.2-r0

Security vulnerability affects the aws-network-policy-agent package. This issue is resolved in later releases. See references for vulnerability details...

5.9AI score

SaveExploits0References2

OSV•added 2026/05/18 1:31 p.m.•21 views

CLEANSTART-2026-XQ84127 Security fixes for CVE-2025-47914, CVE-2025-58181, CVE-2026-29181, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 3.4.0-r0

Multiple security vulnerabilities affect the amazon-cloudwatch-agent-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

9.1CVSS6.5AI score0.01625EPSS

SaveExploits2References29

CNNVD•added 2026/05/18 12:00 a.m.•30 views

Amazon Redshift Python Connector 代码注入漏洞

The Amazon Redshift Python Connector is a Python-compatible connector for Amazon Redshift developed by Amazon, Inc. Versions of the Amazon Redshift Python Connector prior to version 2.1.14 contained a code injection vulnerability. This vulnerability stemmed from the unsafe use of the Python eval...

9.8CVSS6.5AI score0.00803EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2026/05/18 12:00 a.m.•8 views

CVE-2026-8838: Improper Control of Generation of Code

9.8CVSS6.5AI score0.00803EPSS

SaveExploits1References2