Lucene search
+L

1994 matches found

OSV
OSV
added 2026/01/10 5:37 a.m.16 views

CVE-2026-22611 AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value

AWS SDK for .NET works with Amazon Web Services to help build scalable solutions with Amazon S3, Amazon DynamoDB, Amazon Glacier, and more. From versions 4.0.0 to before 4.0.3.3, Customer applications could be configured to improperly route AWS API calls to non-existent or non-AWS hosts. This...

3.7CVSS5.7AI score0.00208EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/10 12:00 a.m.16 views

PT-2026-2231

Name of the Vulnerable Software and Affected Versions AWS SDK for .NET versions 4.0.0 through 4.0.3.2 Description The AWS SDK for .NET, used with Amazon Web Services for building scalable solutions, is affected by an issue where applications could be configured to improperly route AWS API calls t...

3.7CVSS6.5AI score0.00208EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/01/09 6:56 p.m.21 views

AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value

Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement has been implemented in th...

3.7CVSS6.7AI score0.00208EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/01/09 6:56 p.m.31 views

GHSA-9CVC-H2W8-PHRP AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value

Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement has been implemented in th...

3.7CVSS6.6AI score0.00208EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/01/09 6:56 p.m.9 views

Improper Validation of Syntactic Correctness of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the region input field. An attacker can cause AWS API calls to be routed to unintended or non-existent hosts by supplying an invalid value. Remediation Upgrade AWSSDK.Core to...

6.3CVSS6.8AI score0.00208EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 12:09 p.m.13 views

CVE-2018-18194

An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region::GetSample in DLS.cpp...

8.8CVSS7AI score0.01184EPSS
SaveExploits1References1
GitLab Advisory Database
GitLab Advisory Database
added 2026/01/09 12:00 a.m.20 views

AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value

This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement has been implemented in the AWS SD...

3.7CVSS6.8AI score0.00208EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2026/01/08 10:12 p.m.11 views

EUVD-2026-1416

AWS SDK for Swift adopted defense in depth enhancement for region parameter value...

6.4AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/01/08 10:12 p.m.16 views

AWS SDK for Swift adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

6.7AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/01/08 10:12 p.m.11 views

GHSA-PC9J-5V36-2MWW AWS SDK for Swift adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

3.7CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/01/08 10:04 p.m.8 views

EUVD-2026-1417

JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3...

6.4AI score
SaveExploits0References2
Snyk
Snyk
added 2026/01/08 10:04 p.m.5 views

Improper Validation of Syntactic Correctness of Input

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the region input field. An attacker can cause AWS API calls to be routed to unintended or non-existent hosts by supplying an invalid...

3.1CVSS6.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/01/08 10:04 p.m.7 views

Improper Validation of Syntactic Correctness of Input

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the region input field. An attacker can cause AWS API calls to be routed to unintended or non-existent hosts by supplying an invalid...

3.1CVSS6.9AI score
SaveExploits0References2
OSV
OSV
added 2026/01/08 10:04 p.m.183 views

GHSA-J965-2QGJ-VJMQ JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. Per the AWS shared responsibilit...

3.7CVSS6.6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/01/08 10:04 p.m.75 views

JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. Per the AWS shared responsibilit...

6.6AI score
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/01/08 9:52 p.m.10 views

EUVD-2026-1418

AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value...

6.4AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/01/08 9:52 p.m.82 views

AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

6.7AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/01/08 9:52 p.m.90 views

GHSA-6475-R3VJ-M8VF AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

3.7CVSS6.6AI score
SaveExploits0References4
OSV
OSV
added 2026/01/08 9:46 p.m.15 views

GHSA-G59M-GF8J-GJF5 AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value

Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement has been implemented in th...

3.7CVSS5.7AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/01/08 9:46 p.m.15 views

AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value

Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement has been implemented in th...

6.7AI score
SaveExploits0References4Affected Software100
Rows per page
Query Builder