脆弱性一覧
CVE / GHSA / KEV / OSV を統合監視。タグ・カテゴリで絞り込み可能。
| ID | タイトル | |
|---|---|---|
| CVE-2026-11400 |
|
CVE-2026-11400 and CVE-2026-11401
Bulletin ID: 2026-039-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 06/025/2026 12:15 PM PDT Description: Amazon Aurora PostgreSQL a fully managed relational database engine that's compatible with PostgreSQL. We identified CVE-2026-11400(JDBC) and CVE-2026-11401(Go), an issue in AWS Wrappers for Amazon Aurora PostgreSQL will allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. Impacted versions: - AWS Advanced JDBC Wrapper >=3.0.0 and < 4.0.1 - AWS Advanced Go Wrapper release 2026-04-06 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
|
| CVE-2026-42193 |
|
aws の脆弱性 (CVE-2026-42193)
aws に 脆弱性 (CVE-2026-42193) が存在。データの不正な改ざんを許す可能性があります。
|
| CVE-2026-35579 |
|
github.com/coredns/coredns に 認証バイパス (CVE-2026-35579)
github.com/coredns/coredns に 認証バイパス (CVE-2026-35579) が存在。悪用されるとシステム全体を乗っ取られる可能性があります。``tsigStatus`` 経由で攻撃可能。対策: `1.14.3` 以上に更新。
|