Known vulnerabilities in Amazon Linux AMI - page 115

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29290 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2020-8177		 CWE-644 Low
No
No
 - 25.06.2020 SB2020062511
SB2020062514
SB2020063002
and 27 more
#VU29244 - Access of Uninitialized Pointer
CVE-2019-11459		 CWE-824 Low
No
No
 - 25.06.2020 SB2019042313
SB2020071719
SB2019100321
and 8 more
#VU28928 - Exposure of sensitive information to an unauthorized actor
CVE-2020-0543		 CWE-200 Low
No
No
 - 10.06.2020 SB2020061012
SB2020061014
SB2020061017
and 52 more
#VU28318 - Resource exhaustion
CVE-2019-11048		 CWE-400 Medium
No
No
 - 28.05.2020 SB2020052806
SB2020052807
SB2020062301
and 12 more
#VU28271 - Out-of-bounds read
CVE-2020-0093		 CWE-125 Low
No
No
 - 27.05.2020 SB2020051428
SB2020052216
SB2020061704
and 10 more
#VU28183 - Out-of-bounds read
CVE-2020-13112		 CWE-125 High
No
No
 - 22.05.2020 SB2020052216
SB2020061701
SB2020061704
and 12 more
#VU28168 - Integer overflow
CVE-2020-12826		 CWE-190 Low
No
No
 - 21.05.2020 SB2020052129
SB2020071724
SB20200611183
and 3 more
#VU28167 - Use After Free
CVE-2020-12657		 CWE-416 Low
No
No
 - 21.05.2020 SB2020052129
SB2020061019
SB2020061020
and 6 more
#VU27616 - Resource Management Errors
CVE-2020-11810		 CWE-399 Low
No
No
 - 10.05.2020 SB2020051001
SB2020073009
SB2020041802
and 11 more
#VU27257 - Insufficiently Protected Credentials
CVE-2020-11008		 CWE-522 Low
No
No
 - 23.04.2020 SB2020042343
SB2020042344
SB2020042345
and 18 more
#VU24689 - Exposure of sensitive information to an unauthorized actor
CVE-2020-0549		 CWE-200 Low
No
No
 - 28.01.2020 SB2020012802
SB2020061017
SB2020061018
and 31 more
#VU24688 - Exposure of sensitive information to an unauthorized actor
CVE-2020-0548		 CWE-200 Low
No
No
 - 28.01.2020 SB2020012802
SB2020061017
SB2020061018
and 31 more
#VU23428 - Integer overflow
CVE-2019-18609		 CWE-190 Medium
No
No
 - 05.12.2019 SB2019120515
SB2019120516
SB2019121125
and 10 more
#VU20888 - Integer overflow
CVE-2018-21009		 CWE-190 High
No
No
 - 05.09.2019 SB2019090505
SB2020071719
SB2020040196
and 4 more
#VU19598 - Out-of-bounds read
CVE-2019-10871		 CWE-125 Low
No
No
 - 01.08.2019 SB2019040512
SB2019091040
SB2020071719
and 6 more
#VU19596 - Out-of-bounds read
CVE-2019-12293		 CWE-125 Low
No
No
 - 01.08.2019 SB2019052309
SB2019091040
SB2020071719
and 6 more
#VU19570 - Integer overflow
CVE-2019-9959		 CWE-190 Medium
No
No
 - 31.07.2019 SB2019080101
SB2019091040
SB2020071719
and 6 more
#VU19140 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13345		 CWE-79 Medium
No
No
 - 11.07.2019 SB2019071101
SB2019071804
SB2019082010
and 12 more
#VU14330 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2018-13796		 CWE-451 Low
No
No
 - 13.08.2018 SB2018081314
SB2018081315
SB2019040811
and 5 more
#VU13585 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0618		 CWE-79 Low
No
No
 - 30.06.2018 SB2018070505
SB2018063003
SB2018071601
and 7 more


Showing elements 2281 - 2300 out of 3943