Browse / AWS VDP

AWS VDP

See its reports on the map

What gets reported to AWS VDP

• Misconfiguration24
• Code Execution9
• Access Control7
• Authentication4
• Other weaknesses4
• Information Disclosure4

Most upvoted reports

AllValidInformativeN/ADuplicate

1. OS Command Injection in `aws-cdk-lib` NodejsFunction via Unsanitized `OsCommand` Helper (Supply Chain RCE)OS Command Injection · high
   111 votes
2. XSS on Amazon Aquisition: elementalCross-site Scripting (XSS) - Reflected · high
   83 votes
3. Non-Production API Endpoints for the Forecast Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
   75 votes
4. Non-Production API Endpoints for the Amazon S3 Tables Service Fails to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
   69 votes
5. Unlimited Reuse of Coupon Code Allows Free Shipping on All Orders on ██████████Business Logic Errors · low
   69 votes
6. A potential risk in the aws-lambda-ecs-run-task which can be used to privilege escalation.Incorrect Privilege Assignment · medium
   68 votes
7. External service interaction (HTTP)Server-Side Request Forgery (SSRF) · high
   62 votes
8. AWS | Self Registration Internal LibreChat : Access to internal/proprietary LLMsAuthentication Bypass Using an Alternate Path or Channel · low
   61 votes
9. QuickSight Authorization Bypass: Chat Agents Accessible Despite Custom Permissions DenialImproper Access Control - Generic
   59 votes
10. (Part 2) Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    56 votes
11. Password Reuse Vulnerability on AWS Sign-in Page via Password Reset Flow leads to Security Policy ViolationInformativeWeak Password Requirements
    55 votes
12. A potential risk in the experimental-programmatic-access-ccft which can be used to privilege escalation.Incorrect Privilege Assignment · high
    55 votes
13. Reflected XSS on Amazon EC2 InstanceInformativeReflected XSS · high
    55 votes
14. Kiro IDE Stores Auth Tokens with World-Readable Permissions (0644)Incorrect Default Permissions · medium
    54 votes
15. AWS *.a2z.com | Unauthenticated Clickhouse UI : Database access + SSRFAuthentication Bypass · high
    53 votes
16. Bedrock Guardrails Evasion with Prompt FormattingInformative
    53 votes
17. Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    50 votes
18. Bedrock AgentCore Starter Toolkit Creates Gateway IAM Roles Without Confused Deputy ProtectionsIncorrect Permission Assignment for Critical Resource · medium
    48 votes
19. Command Injection via Unsanitized Bundling Options in `aws-cdk-lib/aws-lambda-nodejs`OS Command Injection · high
    48 votes
20. GitHub Retired UsernameTakeover From [aws/████████]Inclusion of Functionality from Untrusted Control Sphere · low
    48 votes
21. Information Disclosure Due To exposed .env file (Directory Listing) at ████████InformativeInformation Exposure Through Directory Listing · high
    46 votes
22. bedrock-mantle.api.aws accepts Bedrock API keys outside the IAM Deny, CloudTrail signal, and invocation logging AWS publishes for Bedrock keysInsecure Default Initialization of Resource · medium
    45 votes
23. Non-Production API Endpoints for the DocumentDB Elastic Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    45 votes
24. Arbitrary Code Execution via Scanner Bypass in **aws-diagram-mcp-server** `exec()` NamespaceInformativeCode Injection
    43 votes
25. CVE-2020-5902 InformativeUsing Components with Known Vulnerabilities · critical
    43 votes
26. V1Plugin.Decrypt panics on empty ciphertext (Remote DoS)Array Index Underflow · medium
    41 votes
27. Sensitive API Key LeakageInformativeCleartext Storage of Sensitive Information · medium
    41 votes
28. SQL Injection Detection Bypass in AWS WAF Managed Rules (AWSManagedRulesSQLiRuleSet)InformativeSQL Injection
    40 votes
29. Non-Production API Endpoint for the ElastiCache Service Fails to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    40 votes
30. Non-Production API Endpoints for the bedrock-agent Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    38 votes
31. Non-Production API Endpoints for the ssm Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    37 votes
32. Responsible disclosure - public S3 bucket exposing JSON/config filesInformation Disclosure · low
    36 votes
33. Session Timeout Does Not Enforce Re-Authentication on AWS Access PortalDuplicateReusing Session IDs (aka Session Replay) · medium
    36 votes
34. Firecracker Out-of-bounds Read/Write Local Privilege Escalation VulnerabilityOut-of-bounds Read
    33 votes
35. Unauthenticated go-httpbin servers : Leads to Cookie Tossing on *.aws.dev and Open RedirectMissing Authentication for Critical Function · medium
    32 votes
36. Non-Production API Endpoints for the Device Farm Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    30 votes
37. Amazon Comprehend Medical Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS EndpointsInsufficient Logging · medium
    29 votes
38. Existence of completed pods allows for bypass of Kubernetes NetworkPolicyImproper Access Control - Generic · medium
    28 votes
39. SQL Injection via Unsanitized Identifiers and String Literals in `@aws-cdk/aws-redshift-alpha` Custom Resource HandlersSQL Injection · high
    27 votes
40. Non-Production API Endpoint for the EventBridge Service Fails to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    26 votes
41. RCE in AWS Amplify CLI via Prototype Chain Traversal in amplify-velocity-templateCode Injection · high
    25 votes
42. V2Plugin.Decrypt panics on empty ciphertext (Remote DoS)Array Index Underflow · medium
    25 votes
43. Non-Production API Endpoints for the bedrock Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    25 votes
44. Remote Code Execution in Amazon MWAA due to outdated Apache Airflow versionInformativeCode Injection
    24 votes
45. Incomplete Input Sanitization in CodeInterpreter install_packages Allows Command Injection via pip FlagsOS Command Injection · high
    23 votes
46. AWS Auto Scaling Service Reporting "AWS Internal" for CloudTrail Events Generated from Specific EndpointsInsufficient Logging · medium
    23 votes
47. Non-Production API Endpoints for the Global Accelerator Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    23 votes
48. Non-Production API Endpoints for the cloudwatch Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    23 votes
49. A potential risk in the cloudFrontExtensionsConsole which can be used to privilege escalation.Improper Access Control - Generic · medium
    23 votes
50. Health check errors silently dropped when channel buffer fullInformative
    22 votes
51. Non-Production API Endpoints for the Amazon Cloudwatch Fails to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    21 votes
52. Non-Production API Endpoints for the Health Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    21 votes
53. Encryption context keys and values logged at INFO levelInformativeInsertion of Sensitive Information into Log File
    19 votes
54. Command Injection on Amazon Q Developer CLI via malicious .amazonq/mcp.json leads to arbitrary code executionInformativeCommand Injection - Generic
    19 votes
55. Sandbox User Can Inject Rogue CA Certificate into OS Trust Store via Sudo-Allowed deploy-certificates.shImproper Certificate Validation · medium
    18 votes
56. Non-Production API Endpoints for the AI Ops Service Fails to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    18 votes
57. Amazon Pinpoint SMS and Voice, version 2 Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS EndpointsInsufficient Logging · medium
    18 votes
58. Non-Production API Endpoints for the Glue Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    18 votes
59. Non-Production API Endpoints for the Neptune Graph Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    17 votes
60. Amazon Kendra Intelligent Ranking Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS EndpointsInsufficient Logging · medium
    16 votes
61. Non-Production API Endpoints for the Route 53 Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationInsufficient Logging · medium
    14 votes
62. Unescaped consent-prompt renderer (HTML()) enables concealed-approval OS command injection in strands-agents/tools use_computer — RCEOS Command Injection · medium
    13 votes