CVE-2026-119301

Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS SDK for pandas also published as awswrangler 3.5.2 through 3.17.0 might allow an authenticated remote user with permission to modify AWS Glue Data Catalog metadata to read any tab...

EUVD-2026-115329

Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS SDK for pandas also published as awswrangler 3.5.2 through 3.17.0 might allow an authenticated remote user with permission to modify AWS Glue Data Catalog metadata to read any tab...

CVE-2026-119301

The AWS SDK for pandas (also known as awswrangler ), versions 3.5.2 through 3.17.0 , is vulnerable to improper neutralization of quoting syntax in SQL identifier construction within the Apache Iceberg write component. An authenticated remote user with permissions to modify AWS Glue Data Catalog m...

CVE-2026-119301 Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS SDK for pandas also published as awswrangler 3.5.2 through 3.17.0 might allow an authenticated remote user with permission to modify AWS Glue Data Catalog metadata to read any tab...

aws__aws-sdk-java_CVE-2022-31159_1-12-2600

AWS SDK for Java The AWS SDK for Java enables Java developers to easily work with Amazon Web Servicesaws and build scalable solutions with Amazon S3, Amazon DynamoDB, Amazon Glacier, and more. See the AWS SDK for Java 2.xaws-sdk-for-java-2x for how to get started. In Maintenance Mode as of July 3...

CVE-2026-118029

A flaw was found in AWS SDK for pandas awswrangler. The Athena module does not verify the ownership of the default query result location in Amazon Simple Storage Service S3. A remote attacker who pre-creates the default S3 storage bucket can exploit this vulnerability to read sensitive Athena que...

CVE-2026-118029

Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas awswrangler before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket. To remediate this issue, users...

EUVD-2026-112142

Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas awswrangler before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket. To remediate this issue, users...

CVE-2026-118029

Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas awswrangler before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket. To remediate this issue, users...

CVE-2026-118029

The AWS SDK for pandas (awswrangler) module before version 3.16.1 is vulnerable to unverified ownership of the default Athena query result location (CWE-283). This issue may allow remote actors to read Athena query results or tamper with result sets returned to a caller by using a pre-created S3 ...

CVE-2026-118029 Unverified ownership of the default Athena query result location in AWS SDK for pandas

Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas awswrangler before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket. To remediate this issue, users...

CVE-2026-118029 Unverified ownership of the default Athena query result location in AWS SDK for pandas

Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas awswrangler before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket. To remediate this issue, users...

CVE-2026-21830

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints...

EUVD-2026-112040

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints...

CVE-2026-21830 HCL BigFix AEX is affected by multiple security vulnerabilities.

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints...

CVE-2026-21830

The HCL BigFix AEX product is affected by a vulnerability within the aws-sdk package. This flaw is caused by Improper Input Validation (CWE-20), which may result in AWS API requests being directed to unintended or non-AWS endpoints . No specific exploit information or remediation steps are provid...

PT-2026-128223

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints...

HCL BigFix AEX input validation error vulnerability

HCL BigFix AEX version 13.0 contains an input validation error vulnerability. This vulnerability stems from a flaw in the aws-sdk package and may result in AWS API requests being sent to unintended or non-AWS endpoints...

CVE-2026-21830: HCL Software BigFix AEX: HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints...

PT-2026-128265

Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas awswrangler before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket. To remediate this issue, users...