Lucene search
+L

2004 matches found

Github Security Blog
Github Security Blog
added 2026/01/08 10:12 p.m.16 views

AWS SDK for Swift adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

6.7AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/01/08 10:12 p.m.11 views

GHSA-PC9J-5V36-2MWW AWS SDK for Swift adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

3.7CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/01/08 10:04 p.m.8 views

EUVD-2026-1417

JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3...

6.4AI score
SaveExploits0References2
Snyk
Snyk
added 2026/01/08 10:04 p.m.5 views

Improper Validation of Syntactic Correctness of Input

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the region input field. An attacker can cause AWS API calls to be routed to unintended or non-existent hosts by supplying an invalid...

3.1CVSS6.9AI score
SaveExploits0References2
OSV
OSV
added 2026/01/08 10:04 p.m.183 views

GHSA-J965-2QGJ-VJMQ JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. Per the AWS shared responsibilit...

3.7CVSS6.6AI score
SaveExploits0References2
Snyk
Snyk
added 2026/01/08 10:04 p.m.7 views

Improper Validation of Syntactic Correctness of Input

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the region input field. An attacker can cause AWS API calls to be routed to unintended or non-existent hosts by supplying an invalid...

3.1CVSS6.9AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/01/08 10:04 p.m.76 views

JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. Per the AWS shared responsibilit...

6.6AI score
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/01/08 9:52 p.m.10 views

EUVD-2026-1418

AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value...

6.4AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/01/08 9:52 p.m.82 views

AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

6.7AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/01/08 9:52 p.m.91 views

GHSA-6475-R3VJ-M8VF AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

3.7CVSS6.6AI score
SaveExploits0References4
OSV
OSV
added 2026/01/08 9:46 p.m.15 views

GHSA-G59M-GF8J-GJF5 AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value

Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement has been implemented in th...

3.7CVSS5.7AI score
SaveExploits0References4
EUVD
EUVD
added 2026/01/08 9:46 p.m.7 views

EUVD-2026-1420

AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value...

6.4AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/01/08 9:46 p.m.15 views

AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value

Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement has been implemented in th...

6.7AI score
SaveExploits0References4Affected Software100
GitLab Advisory Database
GitLab Advisory Database
added 2026/01/08 12:00 a.m.10 views

AWS SDK for Swift adopted defense in depth enhancement for region parameter value

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

6.7AI score
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/08 12:00 a.m.14 views

PT-2026-3409

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...

3.7CVSS6.7AI score
SaveExploits0References5
EUVD
EUVD
added 2026/01/08 12:00 a.m.9 views

EUVD-2026-1440

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the LAN interface. The root account is configured with no password, and administrators cannot disable SSH or enforce authentication via the CLI or web GUI. This allows any LAN-adjacent attacker to...

8.4CVSS7.5AI score0.00225EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/08 12:00 a.m.14 views

PT-2026-3412

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. Per the AWS shared responsibilit...

3.7CVSS6.6AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/03 12:00 a.m.12 views

PT-2026-37523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the cx25821 dev setup function. The issue occurs when ioremap fails, preventing the release of the memory region previously obtained by cx25821 get resources...

5.5CVSS5.4AI score0.00128EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.8 views

PT-2026-26122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where a shared memory region for statistics reporting between the driver and the Network Interface Card NIC is susceptible to corruption. The NIC...

7.8CVSS5.8AI score0.0012EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.10 views

PT-2026-8191

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc6-next-2026012 Description A flaw exists in the Linux kernel's cgroup/dmem subsystem where a NULL pointer dereference can occur when setting the maximum memory limit. This issue is triggered when...

5.8AI score0.00155EPSS
SaveExploits0References14
Rows per page
Query Builder