Lucene search
+L
AmazonRecent

9213 matches found

Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: kernel-livepatch-6.18.36-69.134

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.12.90-120.164

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.9 views

Important: kernel-livepatch-6.12.92-122.166

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: kernel-livepatch-6.12.83-113.160

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.12.83-115.161

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.10 views

Important: python3.12

Issue Overview: The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. CVE-2026-15308 In the Tarfile.extract function, the filter parameter is not passed properly when extracting...

8.7CVSS5.5AI score0.00637EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.12.94-123.176

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.18.33-63.124

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.1.176-221.360

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.1.172-216.329

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.10 views

Important: kernel-livepatch-6.1.168-203.330

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: kernel-livepatch-6.18.36-69.136

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.12.88-119.157

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.10 views

Important: kernel-livepatch-6.12.94-123.180

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.1.172-216.339

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.11 views

Important: python3

Issue Overview: CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. CVE-2026-15308 When...

8.7CVSS5.7AI score0.00637EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.13 views

Important: python-pillow

Issue Overview: Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as...

8.7CVSS7.1AI score0.00476EPSS
SaveExploits7
Amazon
Amazon
added 2026/08/04 12:00 a.m.6 views

Medium: amazon-cloudwatch-agent

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

9.1CVSS7AI score0.006EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Medium: amazon-cloudwatch-agent

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

9.1CVSS7AI score0.006EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.10 views

Important: python3.9

Issue Overview: The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. CVE-2026-15308 In the Tarfile.extract function, the filter parameter is not passed properly when extracting...

8.7CVSS5.5AI score0.00637EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Critical: php8.4

Issue Overview: Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9. CVE-2026-17543 Attacker-provided inputs to bccomp could lea...

9.8CVSS6AI score0.00522EPSS
SaveExploits4
Amazon
Amazon
added 2026/08/04 12:00 a.m.11 views

Important: glib2

Issue Overview: A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path i...

7.1CVSS5.7AI score0.00134EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: bind

Issue Overview: BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and...

8.6CVSS5.5AI score0.00509EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.10 views

Important: java-26-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11...

7.5CVSS7AI score0.00306EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: unbound

Issue Overview: In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of attacks was found in Unbound that could extend the ghost domain window by up to one cached TTL configured value for A/AAAA glue records...

9.3CVSS5.6AI score0.00254EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.20 views

Important: java-11-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11...

7.5CVSS7AI score0.00463EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.14 views

Important: java-21-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11...

7.5CVSS7AI score0.00306EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: python-pillow

Issue Overview: Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as...

8.3CVSS7.7AI score0.00476EPSS
SaveExploits4
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: gimp

Issue Overview: A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscannergettoken function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory...

7.8CVSS6AI score0.00257EPSS
SaveExploits1
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: rclone

Issue Overview: Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating the target, allowing ...

8.8CVSS5.5AI score0.00422EPSS
SaveExploits2
Amazon
Amazon
added 2026/08/04 12:00 a.m.9 views

Important: rust-cargo-c

Issue Overview: gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0 incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized with only partial configuration in...

8.5CVSS6AI score0.00351EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.6 views

Important: python-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving Authorization, authusername, authpassword, and authmode in place when a redirect changed scheme...

7.7CVSS5.6AI score0.00572EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.6 views

Important: python3.13-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving Authorization, authusername, authpassword, and authmode in place when a redirect changed scheme...

7.7CVSS5.6AI score0.00572EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.11 views

Important: perl-DBI

Issue Overview: DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the ismatched method, = was evaluated using Perl...

9.8CVSS5.7AI score0.00387EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.9 views

Medium: jbig2dec

Issue Overview: An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafted input. CVE-2026-38076 Affected Packages: jbig2dec Issue Correction: Run dnf update jbig2dec --releasever 2023.12.20260803 or dnf update...

7.5CVSS5.5AI score0.00432EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Medium: libxml2

Issue Overview: libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function processes user input using fixed-size stack buffers without proper bounds checking. By supplying an overly long input line, an attacker can...

7.8CVSS6.6AI score0.00148EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.6 views

Medium: libxml2

Issue Overview: libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function processes user input using fixed-size stack buffers without proper bounds checking. By supplying an overly long input line, an attacker can...

7.8CVSS6.5AI score0.00148EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: nginx

Issue Overview: A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...

9.2CVSS7.8AI score0.03506EPSS
SaveExploits5
Amazon
Amazon
added 2026/08/04 12:00 a.m.9 views

Important: nginx

Issue Overview: A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...

9.2CVSS7.8AI score0.03506EPSS
SaveExploits5
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: aws-nitro-enclaves-cli

Issue Overview: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocspresponders returns OCSP responder URLs from a certificate's AIA extension as OpensslString, whose Deref wraps the raw bytes with str::fromutf8unchecked. OpenSSL doe...

8.7CVSS5.5AI score0.00211EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.11 views

Important: python-pyasn1

Issue Overview: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily larg...

7.5CVSS5.6AI score0.00349EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.9 views

Important: python-pyasn1

Issue Overview: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily larg...

7.5CVSS5.5AI score0.00349EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: gstreamer1-plugins-bad-free

Issue Overview: A flaw was found in GStreamer's gst-plugins-bad package. When processing a specially crafted H.264 video file containing malformed MVC or SVC extension slice NAL units, a 1-byte heap out-of-bounds read can occur during parsing. This happens when the parser attempts to check slice...

7.5CVSS7.5AI score0.00577EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: gawk

Issue Overview: Use After Free vulnerability has been found in "io.c" program file of gawk dogetlineredir routine. This issue may lead to a crash. It affects gawk in versions 5.4.0 and below. CVE-2026-40467 Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This...

9.1CVSS5.5AI score0.00291EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: freerdp

Issue Overview: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bindack maxxmitfrag On TS Gateway connections, rpc-maxrecvfrag is initialized to 0x0FF8 4088 and ReceiveFragment is allocated to that size. In rpcbind.c, the client assigns rpc-maxrecvfrag =...

9.1CVSS5.8AI score0.00626EPSS
SaveExploits3
Amazon
Amazon
added 2026/08/04 12:00 a.m.11 views

Important: runfinch-finch

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

7.8CVSS7.8AI score0.00461EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: freerdp

Issue Overview: Heap-buffer-overflow write in AVC444 YUV buffer allocation In libfreerdp/codec/h264.c, avc444ensurebuffer computes the AVC444 YUV444 intermediate buffer size as piDstSizex = piDstStridex padDstHeight using UINT32 arithmetic. When the true product exceeds UINT32MAX, the value wraps...

9.1CVSS8.1AI score0.00626EPSS
SaveExploits5
Amazon
Amazon
added 2026/08/04 12:00 a.m.6 views

Important: libreswan

Issue Overview: An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array...

8.1CVSS6.3AI score0.00598EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.11 views

Important: python3.11

Issue Overview: CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. CVE-2026-15308 In the...

8.7CVSS5.6AI score0.00637EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.5 views

Important: vim

Issue Overview: Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search pattern that is run via winexecute without escapin...

8.4CVSS5.9AI score0.00216EPSS
SaveExploits1
Total number of security vulnerabilities9213