Browse / AWS VDP

AWS VDP

See its reports on the map

What gets reported to AWS VDP

• Misconfiguration24
• Code Execution9
• Access Control7
• Authentication4
• Other weaknesses4
• Information Disclosure4

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Password Reuse Vulnerability on AWS Sign-in Page via Password Reset Flow leads to Security Policy ViolationInformativeWeak Password Requirements
   55 votes
2. Reflected XSS on Amazon EC2 InstanceInformativeReflected XSS · high
   55 votes
3. Bedrock Guardrails Evasion with Prompt FormattingInformative
   53 votes
4. Information Disclosure Due To exposed .env file (Directory Listing) at ████████InformativeInformation Exposure Through Directory Listing · high
   46 votes
5. Arbitrary Code Execution via Scanner Bypass in **aws-diagram-mcp-server** `exec()` NamespaceInformativeCode Injection
   43 votes
6. CVE-2020-5902 InformativeUsing Components with Known Vulnerabilities · critical
   43 votes
7. Sensitive API Key LeakageInformativeCleartext Storage of Sensitive Information · medium
   41 votes
8. SQL Injection Detection Bypass in AWS WAF Managed Rules (AWSManagedRulesSQLiRuleSet)InformativeSQL Injection
   40 votes
9. Remote Code Execution in Amazon MWAA due to outdated Apache Airflow versionInformativeCode Injection
   24 votes
10. Health check errors silently dropped when channel buffer fullInformative
    22 votes
11. Encryption context keys and values logged at INFO levelInformativeInsertion of Sensitive Information into Log File
    19 votes
12. Command Injection on Amazon Q Developer CLI via malicious .amazonq/mcp.json leads to arbitrary code executionInformativeCommand Injection - Generic
    19 votes