Lucene search
+L
AmazonRecent

9213 matches found

Amazon
Amazon
added 2026/07/07 12:00 a.m.15 views

Important: python3.11

Issue Overview: The "tarfile" module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other...

7.8CVSS5.9AI score0.00811EPSS
SaveExploits0
Amazon
Amazon
added 2026/07/07 12:00 a.m.15 views

Important: python3.14

Issue Overview: tarfile.extractall with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself. The extraction fallback validated the symlink at it's archived location but recreated it at the...

7.8CVSS5.8AI score0.0075EPSS
SaveExploits0
Amazon
Amazon
added 2026/07/07 12:00 a.m.15 views

Important: gstreamer1-plugins-good

Issue Overview: Heap buffer overflow in the Matroska MKV demuxer when calculating decompressed buffer sizes for bz2-compressed tracks. The issue occurs due to missing parentheses in the buffer size calculation, causing incorrect memory allocation and potential out-of-bounds writes. from...

7.6CVSS7.6AI score0.00375EPSS
SaveExploits0
Amazon
Amazon
added 2026/07/07 12:00 a.m.12 views

Medium: wireshark

Issue Overview: ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-5299 AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-5401 K12 RF5 file parser crash in...

7.5CVSS6.5AI score0.00206EPSS
SaveExploits34
Amazon
Amazon
added 2026/07/07 12:00 a.m.16 views

Important: expat

Issue Overview: In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers. CVE-2026-56132 Affected Packages: expat Issue Correction: Run dnf update expat...

6.9CVSS6.2AI score0.00107EPSS
SaveExploits0
Amazon
Amazon
added 2026/07/07 12:00 a.m.16 views

Important: python3.12

Issue Overview: The "tarfile" module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other...

7.8CVSS5.9AI score0.00811EPSS
SaveExploits0
Amazon
Amazon
added 2026/07/07 12:00 a.m.12 views

Low: gnupg2

Issue Overview: CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182. CVE-2026-57062 Affected Packages: gnupg2 Issue Correction...

2.9CVSS5.9AI score0.00142EPSS
SaveExploits0
Amazon
Amazon
added 2026/07/07 12:00 a.m.11 views

Important: docker

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

7.5CVSS7.5AI score0.00591EPSS
SaveExploits1
Amazon
Amazon
added 2026/07/07 12:00 a.m.13 views

Important: ansible

Issue Overview: A local privilege escalation vulnerability was found in the ansible.posix authorizedkey module. The module's keyfile function uses os.chown instead of os.lchown and opens files without ONOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic...

7.3CVSS7.1AI score0.00161EPSS
SaveExploits0
Amazon
Amazon
added 2026/07/07 12:00 a.m.18 views

Important: nodejs22

Issue Overview: When undici parses a Set-Cookie header, it accepts any SameSite attribute value that contains Strict, Lax, or None as a substring, rather than the case-insensitive exact match specified by RFC 6265. Non-spec values are silently mapped to one of the three standard tokens:...

9.8CVSS7.3AI score0.03711EPSS
SaveExploits1
Amazon
Amazon
added 2026/07/07 12:00 a.m.21 views

Important: sqlite

Issue Overview: SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger...

8.5CVSS7.8AI score0.00175EPSS
SaveExploits0
Amazon
Amazon
added 2026/07/07 12:00 a.m.17 views

Important: nodejs24

Issue Overview: When undici parses a Set-Cookie header, it accepts any SameSite attribute value that contains Strict, Lax, or None as a substring, rather than the case-insensitive exact match specified by RFC 6265. Non-spec values are silently mapped to one of the three standard tokens:...

9.8CVSS7.3AI score0.03711EPSS
SaveExploits1
Amazon
Amazon
added 2026/07/07 12:00 a.m.15 views

Important: haproxy

Issue Overview: HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert within src/hpack-tbl.c that fails to validate the return value of hpackdhtdefrag when the memory pool is exhausted. An attacker can trigger HPACK dynamic table...

8.7CVSS6AI score0.00484EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/29 12:00 a.m.15 views

Important: containerd

Issue Overview: Memory exhaustion DoS causing OOM kill of containerd process NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq CVE-2026-47262 Image cache poisoning via unvalidated checkpoint image references, enabling cross-pod code execution NOTE:...

9.9CVSS6AI score0.00347EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/29 12:00 a.m.25 views

Medium: ecs-init

Issue Overview: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder Affected Packages: ecs-init Note: This advisory is applicable to Amazon Linux 2 - Ecs Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section for the difference between AL...

5.8AI score
SaveExploits0
Amazon
Amazon
added 2026/06/29 12:00 a.m.17 views

Critical: rclone

Issue Overview: Rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.46.0 until 1.74.3, rclone rcd --rc-serve accepts unauthenticated GET and HEAD requests to paths of the form: /remote:path/object. The remote value is parsed from th...

9.8CVSS5.9AI score0.00744EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/29 12:00 a.m.14 views

Critical: rclone

Issue Overview: Rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.46.0 until 1.74.3, rclone rcd --rc-serve accepts unauthenticated GET and HEAD requests to paths of the form: /remote:path/object. The remote value is parsed from th...

9.8CVSS5.8AI score0.00744EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/29 12:00 a.m.15 views

Medium: ecs-init

Issue Overview: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder Affected Packages: ecs-init Issue Correction: Run dnf update ecs-init --releasever 2023.12.20260629 or dnf update --advisory ALAS2023-2026-1906 --releasever 2023.12.20260629 to update your system. More...

5.7AI score
SaveExploits0
Amazon
Amazon
added 2026/06/29 12:00 a.m.15 views

Important: containerd

Issue Overview: Memory exhaustion DoS causing OOM kill of containerd process NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq CVE-2026-47262 Image cache poisoning via unvalidated checkpoint image references, enabling cross-pod code execution NOTE:...

9.9CVSS6AI score0.00347EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.12 views

Important: evince

Issue Overview: CVE-2026-46529 is a command injection vulnerability in Evince, Atril, and Xreader caused by missing quoting of shell-like input in evspawn in ev-application.c. CVE-2026-46529 Affected Packages: evince Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit...

8.4CVSS5.9AI score0.00529EPSS
SaveExploits1
Amazon
Amazon
added 2026/06/22 12:00 a.m.16 views

Important: poppler

Issue Overview: A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the tilingPatternFill function. This overflow leads to an undersized heap memory allocation,...

7.8CVSS6.1AI score0.00252EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.16 views

Important: mariadb-connector-c

Issue Overview: An application that was taking non-validated user input, escaping it with mysqlrealescapestring and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysqlrealescapestring was supposed to prevent them. CVE-2026-4417...

9.8CVSS5.8AI score0.00591EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.14 views

Medium: golang-github-burntsushi-toml-test

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

7.5CVSS6AI score0.00591EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.18 views

Medium: ImageMagick

Issue Overview: When writing an IPTC output file a malicious input file could cause an out of bounds read of a single byte. as per: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7wff-wpr6-vmhm CVE-2026-42326 Due to a missing check in the PSD decoder it would be possible to...

7.5CVSS6.1AI score0.01849EPSS
SaveExploits4
Amazon
Amazon
added 2026/06/22 12:00 a.m.16 views

Important: kernel-livepatch-6.12.80-105.147

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry CVE-2026-46316 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nestedmmus array behind...

9.3CVSS5.8AI score0.00441EPSS
SaveExploits1
Amazon
Amazon
added 2026/06/22 12:00 a.m.17 views

Important: kernel-livepatch-6.12.79-101.147

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry CVE-2026-46316 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nestedmmus array behind...

9.3CVSS5.8AI score0.00441EPSS
SaveExploits1
Amazon
Amazon
added 2026/06/22 12:00 a.m.11 views

Important: kernel-livepatch-6.12.88-119.157

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry CVE-2026-46316 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nestedmmus array behind...

9.3CVSS5.8AI score0.00441EPSS
SaveExploits1
Amazon
Amazon
added 2026/06/22 12:00 a.m.14 views

Important: kernel-livepatch-6.18.20-41.237

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry CVE-2026-46316 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nestedmmus array behind...

9.3CVSS5.8AI score0.00441EPSS
SaveExploits1
Amazon
Amazon
added 2026/06/22 12:00 a.m.12 views

Important: kernel-livepatch-6.18.25-57.109

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry CVE-2026-46316 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nestedmmus array behind...

9.3CVSS5.8AI score0.00441EPSS
SaveExploits1
Amazon
Amazon
added 2026/06/22 12:00 a.m.14 views

Important: kernel-livepatch-6.18.30-61.116

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry CVE-2026-46316 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nestedmmus array behind...

9.3CVSS5.8AI score0.00441EPSS
SaveExploits1
Amazon
Amazon
added 2026/06/22 12:00 a.m.22 views

Important: mariadb1011

Issue Overview: Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

9.8CVSS7.4AI score0.0062EPSS
SaveExploits1
Amazon
Amazon
added 2026/06/22 12:00 a.m.15 views

Important: perl-DBI

Issue Overview: DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholders...

9.8CVSS6.3AI score0.00485EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.15 views

Important: ecs-service-connect-agent

Issue Overview: A denial-of-service vulnerability was found in Envoy's HTTP/2 HPACK header compression implementation. A remote attacker could send a specially crafted HTTP/2 request that triggers disproportionately large memory allocations on the server, leading to resource exhaustion and denial...

7.5CVSS6.1AI score0.00967EPSS
SaveExploits1
Amazon
Amazon
added 2026/06/22 12:00 a.m.17 views

Medium: golang

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

7.5CVSS6AI score0.00591EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.16 views

Important: mariadb114

Issue Overview: During the SST the donor node is interpolating parameters that the joiner sent into the command line. Not all parameters were properly validated which could allow a malicious joiner to execute arbitrary shell commands on the donor side via the mariabackup SST method. CVE-2026-4416...

9.8CVSS6.2AI score0.0062EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.17 views

Important: libnfs

Issue Overview: libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfszdrstring in lib/libnfs-zdr.c. CVE-2026-53689 Affected Packages: libnfs Note: This advisory is applicable to Amazon...

7.1CVSS5.9AI score0.00212EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.19 views

Medium: golang-github-burntsushi-toml

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

7.5CVSS6AI score0.00591EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.16 views

Important: perl-CryptX

Issue Overview: CryptX versions before 0.088001 for Perl have a stack buffer overflow in four AEAD decryptverify helpers. The gcmdecryptverify, ccmdecryptverify, chacha20poly1305decryptverify and eaxdecryptverify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stac...

7.5CVSS6.2AI score0.00469EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.18 views

Low: perl-HTML-Parser

Issue Overview: HTML::Entities versions before 3.84 for Perl read freed heap memory in decodeentities. The XS routine backing HTML::Entities::decodeentities cached a pointer repl into the entity-value SV returned by hvfetch on the entity2char hash. When the input SV was identical to a value SV in...

7.5CVSS6AI score0.00408EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.12 views

Important: dotnet10.0

Issue Overview: Improper authorization in .NET allows an authorized attacker to elevate privileges locally. CVE-2026-45490 Improper link resolution before file access 'link following' in .NET allows an unauthorized attacker to perform tampering locally. CVE-2026-45491 Uncontrolled resource...

7.8CVSS5.8AI score0.0243EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.23 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: blk-mq: use quiesced elevator switch when reinitializing queues CVE-2022-50552 In the Linux kernel, the following vulnerability has been resolved: net: clear the dst when changing skb protocol CVE-2025-38192 In th...

9.8CVSS6.7AI score0.00554EPSS
SaveExploits1
Amazon
Amazon
added 2026/06/22 12:00 a.m.16 views

Important: openssl

Issue Overview: Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application Denial of...

8.8CVSS6.7AI score0.05236EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.17 views

Important: openssl-snapsafe

Issue Overview: Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application Denial of...

8.8CVSS6.8AI score0.05236EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.23 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: IB/mad: Don't call to function that might sleep while in atomic context CVE-2022-50472 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash when I/O abort times out...

9.8CVSS6.8AI score0.00554EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.15 views

Important: edk2

Issue Overview: Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application Denial of...

8.8CVSS6.7AI score0.05236EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.23 views

Important: perl-IO-Compress

Issue Overview: IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward. fastForward compares length $offset the digit count of the offset, 1 to 19 against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes...

7.5CVSS6.2AI score0.00373EPSS
SaveExploits3
Amazon
Amazon
added 2026/06/22 12:00 a.m.15 views

Medium: httpd

Issue Overview: Use After Free vulnerability in Apache HTTP Server with modldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue. CVE-2026-29167 A cross-site scripting...

9.8CVSS6AI score0.01118EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.22 views

Important: openssl

Issue Overview: Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application Denial of...

9.1CVSS6.8AI score0.01165EPSS
SaveExploits0
Amazon
Amazon
added 2026/06/22 12:00 a.m.24 views

Important: perl-IO-Compress

Issue Overview: IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward. fastForward compares length $offset the digit count of the offset, 1 to 19 against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes...

7.5CVSS6.1AI score0.00373EPSS
SaveExploits3
Amazon
Amazon
added 2026/06/22 12:00 a.m.15 views

Medium: rust

Issue Overview: gitoxide is an implementation of git written in Rust. Prior to 0.21.1, a malicious tree can be constructed that will, when checked out with gitoxide, permit writing an attacker-controlled symlink into any existing directory the user has write access to. During checkout, all symlin...

7.8CVSS7AI score0.00248EPSS
SaveExploits1
Total number of security vulnerabilities9213