Known vulnerabilities in Amazon Linux AMI - page 108

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48436 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-25695		 CWE-89 Medium
No
No
 - 16.11.2020 SB2020111609
SB2020111711
SB2020111816
and 33 more
#VU48437 - Improper Access Control
CVE-2020-25694		 CWE-284 Medium
No
No
 - 16.11.2020 SB2020111609
SB2020111711
SB2020111815
and 35 more
#VU48438 - Improper input validation
CVE-2020-25696		 CWE-20 Medium
No
No
 - 16.11.2020 SB2020111609
SB2020111711
SB2020111817
and 32 more
#VU47991 - NULL Pointer Dereference
CVE-2020-14323		 CWE-476 Medium
No
No
 - 29.10.2020 SB2020102935
SB2020110205
SB2020110211
and 18 more
#VU47990 - Permissions, Privileges, and Access Controls
CVE-2020-14318		 CWE-264 Low
No
No
 - 29.10.2020 SB2020102935
SB2020110205
SB2020110211
and 17 more
#VU47775 - Improper input validation
CVE-2020-14803		 CWE-20 Medium
No
No
 - 21.10.2020 SB2020102110
SB2020102801
SB2020102802
and 50 more
#VU47776 - Improper input validation
CVE-2020-14792		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 36 more
#VU47777 - Missing Encryption of Sensitive Data
CVE-2020-14781		 CWE-311 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 48 more
#VU47778 - Improper input validation
CVE-2020-14782		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 52 more
#VU47779 - Improper input validation
CVE-2020-14797		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 46 more
#VU47780 - Improper input validation
CVE-2020-14779		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 46 more
#VU47781 - Improper input validation
CVE-2020-14796		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 42 more
#VU46027 - Double Free
CVE-2020-14363		 CWE-415 Low
No
No
 - 25.08.2020 SB2020082522
SB2020082802
SB2020082526
and 19 more
#VU45819 - Reachable Assertion
CVE-2020-8622		 CWE-617 Medium
No
No
 - 20.08.2020 SB2020082019
SB2020082201
SB2020083002
and 27 more
#VU45628 - Permissions, Privileges, and Access Controls
CVE-2020-1472		 CWE-264 High
Available
Exploited
 - 12.08.2020 SB2020081242
SB2020091810
SB2020092413
and 22 more
#VU24078 - Out-of-bounds write
CVE-2019-5188		 CWE-787 Low
No
No
 - 08.01.2020 SB2020010806
SB2020020501
SB2020011631
and 11 more
#VU23905 - Operation on a Resource after Expiration or Release
CVE-2019-15691		 CWE-672 High
No
No
 - 03.01.2020 SB2019010302
SB2020012112
SB2020093045
and 4 more
#VU21329 - Out-of-bounds write
CVE-2019-5094		 CWE-787 Low
No
No
 - 25.09.2019 SB2019092502
SB2019092902
SB2019093014
and 14 more
#VU21091 - Out-of-bounds read
CVE-2019-15903		 CWE-125 Medium
Available
No
 - 12.09.2019 SB2019091209
SB2019091210
SB2019091701
and 61 more
#VU18923 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-20843		 CWE-611 Medium
Available
No
 - 27.06.2019 SB2019062808
SB2019070104
SB2019072102
and 30 more


Showing elements 2141 - 2160 out of 3943