6669 matches found
@neptune.digital/sentry-netlify-v2 (1.2.1) potentially affected by CVE-2025-65944 via @sentry/aws-serverless (10.19.0)
@sentry/aws-serverless NPM version 10.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sentry/aws-serverless and may be impacted: - @neptune.digital/sentry-netlify-v2 1.2.1 Source cves: CVE-2025-65944 Source advisory: OSV:GHSA-6465-JGVQ-JHGP...
CVE-2025-22105 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-azure, linux-gcp...
CVE-2025-23130 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-azure, linux-gcp...
CVE-2025-13524: Improper Resource Shutdown or Release
Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require...
Ubuntu: Security Advisory (USN-7861-4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-63604
A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the executequery method. The vulnerability stems from the exposure of dangerous Python built-in functions import, getattr, hasattr in...
CVE-2025-63604
A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the executequery method. The vulnerability stems from the exposure of dangerous Python built-in functions import, getattr, hasattr in...
GHSA-9MJ6-HXHV-W67J vulnerabilities
Vulnerabilities for packages: grafana-alloy, cluster-api-aws-controller, jitsucom-bulker, opentelemetry-collector-contrib, sqlexporter, argo-events, splunk-otel-collector, bento, amazon-cloudwatch-agent...
CVE-2025-63811 vulnerabilities
Vulnerabilities for packages: grafana-alloy, cluster-api-aws-controller, jitsucom-bulker, opentelemetry-collector-contrib, sqlexporter, argo-events, splunk-otel-collector, bento, amazon-cloudwatch-agent...
GHSA-9MJ6-HXHV-W67J vulnerabilities
Vulnerabilities for packages: argo-events-fips, jitsucom-bulker, dapr, telegraf, vault-fips, vault, bento, amazon-cloudwatch-agent, amazon-cloudwatch-agent-fips, cluster-api-aws-controller, dapr-fips, sqlexporter, splunk-otel-collector, opentelemetry-collector-contrib, splunk-otel-collector-fips,...
CVE-2025-63811 vulnerabilities
Vulnerabilities for packages: argo-events-fips, jitsucom-bulker, dapr, telegraf, vault-fips, vault, bento, amazon-cloudwatch-agent, amazon-cloudwatch-agent-fips, cluster-api-aws-controller, dapr-fips, sqlexporter, splunk-otel-collector, opentelemetry-collector-contrib, splunk-otel-collector-fips,...
CVE-2025-63604: Improper Neutralization of Special Elements used in a Command
A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the executequery method. The vulnerability stems from the exposure of dangerous Python built-in functions import, getattr, hasattr in...
CVE-2025-65073
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...
CVE-2025-65073: Incorrect Authorization
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...
HSEC-2023-0013 git-annex plaintext storage of embedded credentials on encrypted remotes
git-annex plaintext storage of embedded credentials on encrypted remotes git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the Git repository in effectively...
Uncontrolled Search Path Element
Overview Affected versions of this package are vulnerable to Uncontrolled Search Path Element due to unqualified SQL function and operator references in the database dialect components. An attacker can execute malicious code with elevated privileges by creating crafted functions with names that...
Uncontrolled Search Path Element
Overview software.amazon.jdbc:aws-advanced-jdbc-wrapper is an Amazon Web Services AWS Advanced JDBC Wrapper Affected versions of this package are vulnerable to Uncontrolled Search Path Element due to unqualified SQL function and operator references in the database dialect components. An attacker...
GHSA-7XW4-G7MM-R4HH Amazon Web Services Advanced JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...
AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance
Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...
