| Improper Certificate Validation | <1:11.0.33.0.10-1.amzn2023 |
| HTTP Request Smuggling | <1:11.0.33.0.9-1.amzn2023 |
| HTTP Request Smuggling | <1:11.0.33.0.9-1.amzn2023 |
| Exposed Dangerous Method or Function | <1:11.0.33.0.9-1.amzn2023 |
| Out-of-bounds Write | <1:11.0.33.0.9-1.amzn2023 |
| Loop with Unreachable Exit Condition ('Infinite Loop') | <1:11.0.33.0.9-1.amzn2023 |
| Allocation of Resources Without Limits or Throttling | <1:11.0.33.0.9-1.amzn2023 |
| Improper Handling of Highly Compressed Data (Data Amplification) | <1:11.0.33.0.9-1.amzn2023 |
| Directory Traversal | <1:11.0.33.0.9-1.amzn2023 |
| Insufficient Compartmentalization | <1:11.0.33.0.9-1.amzn2023 |
| Out-of-bounds Read | <1:11.0.33.0.9-1.amzn2023 |
| Improper Enforcement of Message Integrity During Transmission in a Communication Channel | <1:11.0.33.0.9-1.amzn2023 |
| Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') | <1:11.0.33.0.9-1.amzn2023 |
| XML Injection | <1:11.0.33.0.9-1.amzn2023 |
| Improperly Implemented Security Check for Standard | <1:11.0.33.0.9-1.amzn2023 |
| Incorrect Implementation of Authentication Algorithm | <1:11.0.33.0.9-1.amzn2023 |
| Improperly Implemented Security Check for Standard | <1:11.0.33.0.9-1.amzn2023 |
| Exposure of Data Element to Wrong Session | <1:11.0.33.0.9-1.amzn2023 |
| Improperly Implemented Security Check for Standard | <1:11.0.33.0.9-1.amzn2023 |
| Information Exposure Through Caching | <1:11.0.33.0.9-1.amzn2023 |
| Insufficient Compartmentalization | <1:11.0.33.0.9-1.amzn2023 |
| Allocation of Resources Without Limits or Throttling | <1:11.0.33.0.9-1.amzn2023 |
| Improper Certificate Validation | <1:11.0.33.0.9-1.amzn2023 |
| XML Injection | <1:11.0.33.0.9-1.amzn2023 |
| CRLF Injection | <1:11.0.33.0.9-1.amzn2023 |
| Out-of-bounds Read | <1:11.0.33.0.9-1.amzn2023 |
| Incorrect Implementation of Authentication Algorithm | <1:11.0.33.0.9-1.amzn2023 |
| Improper Certificate Validation | <1:11.0.33.0.9-1.amzn2023 |
| Improper Validation of Integrity Check Value | <1:11.0.33.0.9-1.amzn2023 |
| Allocation of Resources Without Limits or Throttling | <1:11.0.33.0.9-1.amzn2023 |
| Directory Traversal | <1:11.0.33.0.9-1.amzn2023 |
| Improper Validation of Syntactic Correctness of Input | <1:11.0.33.0.9-1.amzn2023 |
| Exposed Dangerous Method or Function | <1:11.0.33.0.9-1.amzn2023 |
| Directory Traversal | <1:11.0.33.0.9-1.amzn2023 |
| XML External Entity (XXE) Injection | <1:11.0.33.0.9-1.amzn2023 |
| Directory Traversal | <1:11.0.33.0.9-1.amzn2023 |
| Exposed Dangerous Method or Function | <1:11.0.33.0.9-1.amzn2023 |
| LDAP Injection | <1:11.0.33.0.9-1.amzn2023 |
| Compiler Optimization Removal or Modification of Security-critical Code | <1:11.0.33.0.9-1.amzn2023 |
| Comparison Using Wrong Factors | <1:11.0.33.0.9-1.amzn2023 |
| Improper Certificate Validation | <1:11.0.33.0.9-1.amzn2023 |
| Directory Traversal | <1:11.0.33.0.9-1.amzn2023 |
| HTTP Request Smuggling | <1:11.0.33.0.9-1.amzn2023 |
| HTTP Request Smuggling | <1:11.0.33.0.9-1.amzn2023 |
| Improper Certificate Validation | <1:11.0.33.0.9-1.amzn2023 |
| Improper Validation of Syntactic Correctness of Input | <1:11.0.33.0.9-1.amzn2023 |
| Allocation of Resources Without Limits or Throttling | |
| Improper Cross-boundary Removal of Sensitive Data | |
| Server-Side Request Forgery (SSRF) | |
| Improper Certificate Validation | |
| Improper Verification of Cryptographic Signature | |
| Inefficient Regular Expression Complexity | |
| Out-of-bounds Write | |
| Out-of-bounds Write | |
| Improper Certificate Validation | |
| Resource Exhaustion | |
| NULL Pointer Dereference | |
| Resource Exhaustion | |
| Integer Overflow or Wraparound | |
| XML External Entity (XXE) Injection | |
| Uncontrolled Recursion | |
| Cleartext Transmission of Sensitive Information | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Out-of-bounds Read | |
| CRLF Injection | |
| Improper Certificate Validation | |
| Improper Validation of Specified Type of Input | |
| Key Exchange without Entity Authentication | |
| CVE-2020-14573 | |
| Inappropriate Encoding for Output Context | |
| XML External Entity (XXE) Injection | |
| Information Exposure | |
| Protection Mechanism Failure | |
| Heap-based Buffer Overflow | |
| Missing Required Cryptographic Step | |
| Heap-based Buffer Overflow | |
| Heap-based Buffer Overflow | |
| Information Exposure | |
| Buffer Overflow | |
| Signed to Unsigned Conversion Error | |
| Signed to Unsigned Conversion Error | |
| Uncontrolled Memory Allocation | |
| Integer Overflow or Wraparound | |
| Improper Handling of Length Parameter Inconsistency | |
| Improper Validation of Specified Quantity in Input | |
| Out-of-bounds Write | |
| CVE-2024-21147 | |
| CVE-2024-21131 | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| CVE-2024-21140 | |
| Out-of-bounds Write | |
| Improper Output Neutralization for Logs | |
| Reliance on Reverse DNS Resolution for a Security-Critical Action | |
| Uncontrolled Memory Allocation | |
| Integer Overflow or Wraparound | |
| CVE-2024-20925 | |
| Improper Input Validation | |
| Information Exposure Through Log Files | |
| CVE-2024-20923 | |
| Covert Timing Channel | |
| CVE-2024-20922 | |
| Out-of-bounds Write | |
| Improper Input Validation | |
| Improper Input Validation | |
| Improper Certificate Validation | |
| Improper Certificate Validation | |
| Allocation of Resources Without Limits or Throttling | |
| Directory Traversal | |
| Out-of-bounds Read | |
| Small Space of Random Values | |
| Directory Traversal | |
| CVE-2023-22043 | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Improper Input Validation | |
| Improperly Implemented Security Check for Standard | |
| Improper Input Validation | |
| Information Exposure | |
| Improper Neutralization of Null Byte or NUL Character | |
| Improper Neutralization of Null Byte or NUL Character | |
| Improper Enforcement of Message Integrity During Transmission in a Communication Channel | |