MediumCVSS 6.3
EPSS 0.25%
Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.
Technology
Cloud Platforms vulnerabilities
Public cloud services and their SDKs/agents (AWS, Azure, Google Cloud). 1,417 published CVES affecting Cloud Platforms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1,417
- Critical
- 242
- High
- 530
- Medium
- 447
- Low
- 33
- Unscored
- 165
- CISA KEV
- 8
Latest Cloud Platforms CVEs
Newest publication first · page 5 of 40 · showing the latest 1,000
-
-
HighCVSS 7.1 EPSS 0.30%
Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries. This issue has bee...
-
CVE-2026-107783 Insertion of sensitive information into log file in AWS Tools for PowerShell
PublishedMediumCVSS 6.7 EPSS 0.10%Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5...
-
MediumCVSS 6.5 EPSS 0.53%
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.
-
HighCVSS 8.7 EPSS 0.54%
Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.
-
CriticalCVSS 9.8 EPSS 0.72%
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.1 EPSS 0.56%
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
-
MediumCVSS 6.8 EPSS 0.14%
Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset. To remediate this issue, users should upgrade to ver...
-
HighCVSS 8.5 EPSS 0.13%
An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in...
-
MediumCVSS 6.8 EPSS 0.11%
Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world-readable token cache files. To mitigate this issue, users should upgrade to version 4.10.0 or later...
-
CVE-2026-107352 Missing authorization checks in Amazon Athena engine version 3 request handling
PublishedMediumCVSS 6.3 EPSS 0.20%Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata (AWS account identifiers and SQL statement text) from other AWS accounts. Query results, credentials, and Amazon S3 data were no...
-
CVE-2026-106493 Backstage: Cloud storage catalog locations may cross configured storage boundaries
PublishedMediumCVSS 4.1 EPSS 0.28%Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog...
-
MediumCVSS 5.7 EPSS 0.23%
Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated remote actor in the same AWS account to cause the environment of a user importing a Bedrock Agent...
-
HighCVSS 7.1 EPSS 0.33%
Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample ( q-business-lambda-hook https://github.com/aws-solutions-library-samples/qnabot-on-aws/blob/main/source/docs/lambda_hooks/README.md ), available with QnABot on AWS versions 7....
-
MediumCVSS 6.3
Summary Before Langflow 1.10.3, several built-in components sent server-side HTTP requests to URLs the flow author controls, with no SSRF enforcement. An authenticated user who can build or run flows could make the Langflow server reach loopback, RFC 1918 / private networks, link...
-
HighCVSS 8.3 EPSS 0.35%
Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locati...
-
CVE-2026-103957 Server-side request forgery in the OAuth2 discovery handling in Loom for AWS
PublishedHighCVSS 8.2 EPSS 0.40%Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to cause the application to issue requests to arbitrary internal network locations,...
-
CriticalCVSS 10.0 EPSS 2.5%
Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting...
-
Unknown
-= Per source details. Do not edit below this line.=- Source: amazon-inspector (35e844ac2e44aa325f62eaf6a81e4775c3694320b567f834689e26ac5c961b76) The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193 (e623272b4de65cc8a...
-
MediumCVSS 6.0 EPSS 0.31%
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0.
-
Unknown
-= Per source details. Do not edit below this line.=- Source: amazon-inspector (091649f7b927b27a5bd7a35b53784433050bf58e0dc11acc95316b650a13f60b) SPO365-GRAPH presents itself as a SharePoint Online Graph client, but the shipped library module SPO365_GRAPH/SPO365_GRAPH.py consists...
-
MediumCVSS 6.9 EPSS 0.14%
An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference...
-
MediumCVSS 6.9 EPSS 0.43%
Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated...
-
Unknown
friendly-tools 0.2 carries the same Snowflake payload as friendly-greeting-tools. Its --run-demo option, described as a print-only demo, execs a gzip and base64 blob from friendly_greeting/main.py that reads the container session token at /snowflake/session/token, switches to ACC...
-
MediumCVSS 5.4 EPSS 0.19%
The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improperly secure capability check on the 'save_meta_boxes' function in all versions up to, and including, 2.51. This makes it possi...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.