Lucene search
+L
AmazonRecent

9213 matches found

Amazon
Amazon
added 2026/08/04 12:00 a.m.10 views

Important: java-26-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11...

7.5CVSS7AI score0.00306EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.20 views

Important: java-11-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11...

7.5CVSS7AI score0.00463EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: bind

Issue Overview: BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and...

8.6CVSS5.5AI score0.00509EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: ansible-core

Issue Overview: A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--' end-of-options separator before user-supplied URLs when installing collections from git sources. An attacker who provid...

7.8CVSS5.9AI score0.00316EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: aws-nitro-enclaves-cli

Issue Overview: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocspresponders returns OCSP responder URLs from a certificate's AIA extension as OpensslString, whose Deref wraps the raw bytes with str::fromutf8unchecked. OpenSSL doe...

8.7CVSS5.6AI score0.00211EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: perl-YAML-Syck

Issue Overview: YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack. In the bundled libsyck, when an anchor name is redefined or removed, syckhdlraddanchor and syckhdlrremoveanchor free the node stored unde...

9.1CVSS5.5AI score0.00374EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.9 views

Important: kernel-livepatch-6.1.172-216.339

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: gstreamer1-plugins-bad-free

Issue Overview: A heap buffer overflow vulnerability was found in GStreamer's librfb RFB/VNC client. The rectangle bounds check incorrectly validates area rather than individual dimensions, allowing a malicious VNC server to send a rectangle that extends beyond the framebuffer. A remote attacker...

8.8CVSS8.3AI score0.00638EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.6 views

Important: 389-ds-base

Issue Overview: A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. After a successful SASL bind with integrity protection SSF 0, an authenticated attacker can send a specially crafted oversized LDAP UNBIND packet that is copied into a 512-byte heap...

8.8CVSS5.8AI score0.00627EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.19 views

Important: rpm

Issue Overview: A heap buffer overflow exists in RPM's NDB database backend lib/backend/ndb/rpmpkg.c due to unchecked 32-bit arithmetic when parsing the slot table. The slotnpages value is read directly from the on-disk NDB header and used in a 32-bit multiplication slotnpages PAGESIZE / SLOTSIZE...

5.8AI score0.00135EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: kernel-livepatch-6.18.36-69.134

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.12.90-120.164

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.9 views

Important: kernel-livepatch-6.12.92-122.166

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: kernel-livepatch-6.12.83-113.160

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.12.83-115.161

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.12.94-123.176

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.18.33-63.124

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.1.176-221.360

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.1.172-216.329

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.10 views

Important: kernel-livepatch-6.1.168-203.330

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: kernel-livepatch-6.18.36-69.136

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.12.88-119.157

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.10 views

Important: kernel-livepatch-6.12.94-123.180

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.11 views

Important: python3

Issue Overview: CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. CVE-2026-15308 When...

8.7CVSS5.7AI score0.00637EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.10 views

Important: python3.12

Issue Overview: The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. CVE-2026-15308 In the Tarfile.extract function, the filter parameter is not passed properly when extracting...

8.7CVSS5.5AI score0.00637EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.10 views

Important: python3.9

Issue Overview: The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. CVE-2026-15308 In the Tarfile.extract function, the filter parameter is not passed properly when extracting...

8.7CVSS5.5AI score0.00637EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Critical: php8.4

Issue Overview: Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9. CVE-2026-17543 Attacker-provided inputs to bccomp could lea...

9.8CVSS6AI score0.00522EPSS
SaveExploits4
Amazon
Amazon
added 2026/08/04 12:00 a.m.9 views

Important: kernel-livepatch-6.18.20-41.237

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: rclone

Issue Overview: Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating the target, allowing ...

8.8CVSS5.5AI score0.00422EPSS
SaveExploits2
Amazon
Amazon
added 2026/08/04 12:00 a.m.9 views

Important: rust-cargo-c

Issue Overview: gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0 incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized with only partial configuration in...

8.5CVSS6AI score0.00351EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.6 views

Important: python-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving Authorization, authusername, authpassword, and authmode in place when a redirect changed scheme...

7.7CVSS5.6AI score0.00572EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.6 views

Important: python3.13-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving Authorization, authusername, authpassword, and authmode in place when a redirect changed scheme...

7.7CVSS5.6AI score0.00572EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.11 views

Important: perl-DBI

Issue Overview: DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the ismatched method, = was evaluated using Perl...

9.8CVSS5.7AI score0.00387EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.9 views

Medium: jbig2dec

Issue Overview: An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafted input. CVE-2026-38076 Affected Packages: jbig2dec Issue Correction: Run dnf update jbig2dec --releasever 2023.12.20260803 or dnf update...

7.5CVSS5.5AI score0.00432EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Medium: libxml2

Issue Overview: libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function processes user input using fixed-size stack buffers without proper bounds checking. By supplying an overly long input line, an attacker can...

7.8CVSS6.6AI score0.00148EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: dotnet8.0

Issue Overview: Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-47300 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

9.8CVSS7.6AI score0.01105EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.6 views

Important: kernel-livepatch-6.12.92-122.168

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.9 views

Important: kernel-livepatch-6.1.170-210.320

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.6 views

Important: kernel-livepatch-6.1.175-219.359

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: kernel-livepatch-6.12.88-119.160

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.8 views

Important: kernel-livepatch-6.1.174-217.345

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: kernel-livepatch-6.1.175-219.357

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.9 views

Important: kernel-livepatch-6.18.35-68.129

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.10 views

Important: kernel-livepatch-6.1.176-221.367

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.7 views

Important: kernel-livepatch-6.18.36-69.138

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.9 views

Important: kernel-livepatch-6.1.176-220.360

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.6 views

Important: kernel-livepatch-6.1.176-220.358

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

7.8CVSS7AI score0.00474EPSS
SaveExploits10
Amazon
Amazon
added 2026/08/04 12:00 a.m.14 views

Important: python

Issue Overview: CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. CVE-2026-15308 When...

8.7CVSS5.7AI score0.00637EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.11 views

Important: python3.11

Issue Overview: CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. CVE-2026-15308 In the...

8.7CVSS5.6AI score0.00637EPSS
SaveExploits0
Amazon
Amazon
added 2026/08/04 12:00 a.m.6 views

Important: libreswan

Issue Overview: An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array...

8.1CVSS6.3AI score0.00598EPSS
SaveExploits0
Total number of security vulnerabilities9213