Known vulnerabilities in Amazon Linux AMI - page 120

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28725 - Out-of-bounds read
CVE-2019-2960		 CWE-125 Medium
No
No
 - 05.06.2020 SB2019101534
SB2020081915
SB2020010959
and 8 more
#VU28727 - Out-of-bounds read
CVE-2019-2938		 CWE-125 Low
No
No
 - 05.06.2020 SB2019101534
SB2019122205
SB2020081915
and 20 more
#VU28731 - Out-of-bounds read
CVE-2019-2911		 CWE-125 Low
No
No
 - 05.06.2020 SB2019101534
SB2020081915
SB2020010959
and 9 more
#VU28713 - Out-of-bounds read
CVE-2019-2993		 CWE-125 Medium
No
No
 - 05.06.2020 SB2019101534
SB2020081915
SB2020010959
and 8 more
#VU28707 - Out-of-bounds read
CVE-2019-2946		 CWE-125 Medium
No
No
 - 05.06.2020 SB2019101534
SB2020081915
SB2020010959
and 8 more
#VU28709 - Out-of-bounds read
CVE-2019-2914		 CWE-125 Medium
No
No
 - 05.06.2020 SB2019101534
SB2020081915
SB2020010959
and 8 more
#VU28706 - Out-of-bounds read
CVE-2019-2974		 CWE-125 Medium
No
No
 - 05.06.2020 SB2019101534
SB2019122205
SB2020081915
and 24 more
#VU27295 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-13038		 CWE-601 Low
No
No
 - 23.04.2020 SB2019062908
SB2020041450
SB2020010927
and 4 more
#VU26412 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2019-11236		 CWE-93 Medium
Available
No
 - 26.03.2020 SB2020032626
SB2020031827
SB2019091504
and 36 more
#VU25002 - Session Fixation
CVE-2019-17563		 CWE-384 Low
No
No
 - 06.02.2020 SB2019121315
SB2020011492
SB2020011519
and 16 more
#VU25000 - Permissions, Privileges, and Access Controls
CVE-2019-12418		 CWE-264 Low
No
No
 - 06.02.2020 SB2019112222
SB2020011492
SB2020011519
and 4 more
#VU28404 - Out-of-bounds write
CVE-2019-19332		 CWE-787 Low
No
No
 - 09.01.2020 SB2020010928
SB2020020733
SB2020010835
and 5 more
#VU23601 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-11805		 CWE-78 Low
No
No
 - 13.12.2019 SB2019121311
SB2019121501
SB2020011316
and 4 more
#VU23600 - Improper input validation
CVE-2019-12420		 CWE-20 Medium
No
No
 - 13.12.2019 SB2019121311
SB2019121501
SB2020011316
and 7 more
#VU23559 - Improper input validation
CVE-2019-15961		 CWE-20 Medium
No
No
 - 12.12.2019 SB2019121205
SB2019121208
SB2020010817
and 11 more
#VU23019 - Missing release of memory after effective lifetime
CVE-2019-19062		 CWE-401 Low
No
No
 - 27.11.2019 SB2019112712
SB2020020733
SB2020010835
and 6 more
#VU23004 - Cleartext Storage of Sensitive Information
CVE-2018-10871		 CWE-312 Low
No
No
 - 26.11.2019 SB2018071809
SB2020011623
#VU23002 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14824		 CWE-200 Low
No
No
 - 26.11.2019 SB2019110805
SB2019112617
SB2020011623
and 1 more
#VU23001 - Exposure of sensitive information to an unauthorized actor
CVE-2019-10224		 CWE-200 Low
No
No
 - 26.11.2019 SB2019052502
SB2020011623
SB2020072802
#VU21780 - Improper Certificate Validation
CVE-2019-11324		 CWE-295 Medium
Available
No
 - 15.10.2019 SB2019041823
SB2020031827
SB2019091504
and 19 more


Showing elements 2381 - 2400 out of 3943