8333 matches found
PT-2025-43523
Name of the Vulnerable Software and Affected Versions OpenBao AWS Plugin versions prior to 0.1.1 Description The OpenBao AWS Plugin generates AWS access credentials based on IAM policies. Versions of the plugin prior to 0.1.1 are susceptible to cross-account IAM role Impersonation within the AWS...
Ubuntu: Security Advisory (USN-7797-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-62647
The Restaurant Brands International RBI assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path...
CVE-2025-62647
The Restaurant Brands International RBI assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path...
PT-2025-42646
Name of the Vulnerable Software and Affected Versions The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin versions prior to 3.0.2 Description The plugin does not properly restrict URLs used in the stock photo import feature, allowing a user ...
PT-2025-42660
Name of the Vulnerable Software and Affected Versions Restaurant Brands International RBI assistant platform versions through 2025-09-06 Description The Restaurant Brands International RBI assistant platform through 2025-09-06 allows obtaining a JWT JSON Web Token which can be used to call an API...
CVE-2025-62647: Incorrect Authorization
The Restaurant Brands International RBI assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path...
EUVD-2025-34925
The Restaurant Brands International RBI assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation via improper verification of AWS EC2 identity documents in the aws-iid process. An attacker can cause the system to accept forged identity documents by providing documents with missing or invalid...
go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents
Impact This vulnerability only affects users of the AWS attestor. Users of the AWS attestor could have unknowingly received a forged identity document. While this may seem unlikely, AWS recently issued a security bulletin about IMDS Instance Metadata Service impersonation.^1 There are multiple...
CVE-2025-62375: Improper Certificate Validation
go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness versions 0.9.2 and earlier the AWS attestor improperly verifies AWS EC2 instance identity documents. Verification can incorrectly succeed when a signature is not present or is...
GHSA-6CPX-W2CG-QMGR vulnerabilities
Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...
CVE-2025-21751 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...
GHSA-843P-6JF4-C3R6 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...
CVE-2025-11462
Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a non-administrator user to create a...
Ubuntu: Security Advisory (USN-7792-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-7795-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-41361
Critical vulnerability alert - AWS Client VPN for macOS. Vuln info, including versions and reference links, at SecAlerts: CVE-2021-11462, CVSS 9.3 - https://t.co/8NvHlAebRR ciso cio cto vulnerabilities cybersecurity secalerts msp mssp CVE202511462 awsclient aws https://t.co/RVMw6YoXbF...