Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-11400 |
|
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
|
| CVE-2026-11401 |
|
AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance
AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance
|
| CVE-2026-10584 |
|
Vulnerability in Amazon aws (CVE-2026-10584)
vulnerability in Amazon aws (CVE-2026-10584). Confidential information can be exposed externally.
|
| CVE-2026-10591 |
|
Vulnerability in Amazon aws (CVE-2026-10591)
vulnerability in Amazon aws (CVE-2026-10591). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9291 |
|
Unsafe Deserialization in amazon-braket-sdk (CVE-2026-9291)
vulnerability in amazon-braket-sdk (CVE-2026-9291). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.117.0` or later.
|
| CVE-2026-9255 |
|
Vulnerability in Amazon aws (CVE-2026-9255)
vulnerability in Amazon aws (CVE-2026-9255). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9133 |
|
Vulnerability in Amazon aws (CVE-2026-9133)
vulnerability in Amazon aws (CVE-2026-9133). Confidential information can be exposed externally. Exploitable via `PUT /api/aws/arn/validate`.
|
| CVE-2026-8838 |
|
Code Injection in Amazon redshift-connector (CVE-2026-8838)
code injection in Amazon redshift-connector (CVE-2026-8838). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.14` or later.
|
| CVE-2026-8686 |
|
Out-of-Bounds Read in Amazon aws (CVE-2026-8686)
vulnerability in Amazon aws (CVE-2026-8686). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8596 |
|
Vulnerability in Amazon sagemaker (CVE-2026-8596)
vulnerability in Amazon sagemaker (CVE-2026-8596). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.8.0` or later.
|
| CVE-2026-46300 |
|
Out-of-Bounds Write in Amazon aws (CVE-2026-46300)
out-of-bounds write in Amazon aws (CVE-2026-46300). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7461 |
|
Vulnerability in Amazon aws (CVE-2026-7461)
vulnerability in Amazon aws (CVE-2026-7461). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-8904 |
|
Vulnerability in Amazon aws (CVE-2025-8904)
vulnerability in Amazon aws (CVE-2025-8904). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4269 |
|
Vulnerability in Amazon aws (CVE-2026-4269)
vulnerability in Amazon aws (CVE-2026-4269). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4428 |
|
Vulnerability in Amazon aws (CVE-2026-4428)
vulnerability in Amazon aws (CVE-2026-4428). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5429 |
|
Cross-Site Scripting (XSS) in Amazon aws (CVE-2026-5429)
cross-site scripting in Amazon aws (CVE-2026-5429). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7791 |
|
Vulnerability in Amazon aws (CVE-2026-7791)
vulnerability in Amazon aws (CVE-2026-7791). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7425 |
|
Vulnerability in Amazon aws (CVE-2026-7425)
vulnerability in Amazon aws (CVE-2026-7425). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6966 |
|
Vulnerability in Amazon tough (CVE-2026-6966)
vulnerability in Amazon tough (CVE-2026-6966). Data can be tampered with by attackers. Mitigation: upgrade to `0.22.0` or later.
|
| CVE-2026-3494 |
|
Vulnerability in Amazon mysql-client (CVE-2026-3494)
vulnerability in Amazon mysql-client (CVE-2026-3494). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.6.25, 10.11.18, 12.0.2` or later.
|
| CVE-2025-8217 |
|
Vulnerability in Amazon aws (CVE-2025-8217)
vulnerability in Amazon aws (CVE-2025-8217). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-8069 |
|
Vulnerability in Amazon aws (CVE-2025-8069)
vulnerability in Amazon aws (CVE-2025-8069). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7191 |
|
Vulnerability in Amazon aws (CVE-2026-7191)
vulnerability in Amazon aws (CVE-2026-7191). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-6031 |
|
Vulnerability in Amazon aws (CVE-2025-6031)
vulnerability in Amazon aws (CVE-2025-6031). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5747 |
|
Vulnerability in Amazon aws (CVE-2026-5747)
vulnerability in Amazon aws (CVE-2026-5747). Successful exploitation can lead to full system takeover.
|
| CVE-2025-9039 |
|
Vulnerability in Amazon aws (CVE-2025-9039)
vulnerability in Amazon aws (CVE-2025-9039). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-14503 |
|
Vulnerability in Amazon aws (CVE-2025-14503)
vulnerability in Amazon aws (CVE-2025-14503). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6437 |
|
Vulnerability in Amazon aws (CVE-2026-6437)
vulnerability in Amazon aws (CVE-2026-6437). Confidential information can be exposed externally.
|
| CVE-2026-1386 |
|
Vulnerability in Amazon aws (CVE-2026-1386)
vulnerability in Amazon aws (CVE-2026-1386). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-14763 |
|
Vulnerability in Amazon aws (CVE-2025-14763)
vulnerability in Amazon aws (CVE-2025-14763). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4270 |
|
Vulnerability in Amazon awslabs-aws-api-mcp-server (CVE-2026-4270)
vulnerability in Amazon awslabs-aws-api-mcp-server (CVE-2026-4270). Confidential information can be exposed externally. Mitigation: upgrade to `1.3.9` or later.
|
| CVE-2026-3336 |
|
Vulnerability in Amazon aws (CVE-2026-3336)
vulnerability in Amazon aws (CVE-2026-3336). Data can be tampered with by attackers.
|
| CVE-2026-5707 |
|
OS Command Injection in Amazon aws (CVE-2026-5707)
OS command injection in Amazon aws (CVE-2026-5707). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0830 |
|
Vulnerability in Amazon aws (CVE-2026-0830)
vulnerability in Amazon aws (CVE-2026-0830). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7422 |
|
Vulnerability in Amazon aws (CVE-2026-7422)
vulnerability in Amazon aws (CVE-2026-7422). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6550 |
|
Vulnerability in Amazon aws (CVE-2026-6550)
vulnerability in Amazon aws (CVE-2026-6550). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4295 |
|
Vulnerability in Amazon aws (CVE-2026-4295)
vulnerability in Amazon aws (CVE-2026-4295). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1777 |
|
Vulnerability in Amazon sagemaker (CVE-2026-1777)
vulnerability in Amazon sagemaker (CVE-2026-1777). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.256.0` or later.
|
| CVE-2025-12829 |
|
Vulnerability in Amazon aws (CVE-2025-12829)
vulnerability in Amazon aws (CVE-2025-12829). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-12815 |
|
Vulnerability in Amazon aws (CVE-2025-12815)
vulnerability in Amazon aws (CVE-2025-12815). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-12779 |
|
Vulnerability in Amazon aws (CVE-2025-12779)
vulnerability in Amazon aws (CVE-2025-12779). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-31133 |
|
Vulnerability in Amazon aws (CVE-2025-31133)
vulnerability in Amazon aws (CVE-2025-31133). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7424 |
|
Vulnerability in Amazon aws (CVE-2026-7424)
vulnerability in Amazon aws (CVE-2026-7424). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5485 |
|
OS Command Injection in Amazon aws (CVE-2026-5485)
OS command injection in Amazon aws (CVE-2026-5485). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.5.1` or later.
|
| CVE-2025-13524 |
|
Vulnerability in Amazon aws (CVE-2025-13524)
vulnerability in Amazon aws (CVE-2025-13524). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-12967 |
|
Vulnerability in Amazon aws-advanced-python-wrapper (CVE-2025-12967)
vulnerability in Amazon aws-advanced-python-wrapper (CVE-2025-12967). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.4.0` or later.
|
| CVE-2025-66478 |
|
Vulnerability in Amazon aws (CVE-2025-66478)
vulnerability in Amazon aws (CVE-2025-66478). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-11616 |
|
Vulnerability in Amazon aws (CVE-2025-11616)
vulnerability in Amazon aws (CVE-2025-11616). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-11573 |
|
Vulnerability in Amazon aws (CVE-2025-11573)
vulnerability in Amazon aws (CVE-2025-11573). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6911 |
|
Vulnerability in Amazon aws (CVE-2026-6911)
vulnerability in Amazon aws (CVE-2026-6911). Risk of unauthorized operations or information disclosure.
|