Known vulnerabilities in Amazon Linux AMI - page 122

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28689 - Out-of-bounds read
CVE-2019-2999		 CWE-125 Medium
No
No
 - 05.06.2020 SB2019101538
SB2019121502
SB2019112515
and 25 more
#VU23500 - Absolute Path Traversal
CVE-2019-1351		 CWE-36 Medium
No
No
 - 10.12.2019 SB2019121019
SB2019121201
SB2019121209
and 10 more
#VU23494 - Improper input validation
CVE-2019-1349		 CWE-20 High
No
No
 - 10.12.2019 SB2019121019
SB2019121201
SB2019121207
and 16 more
#VU23493 - Improper input validation
CVE-2019-1350		 CWE-20 High
No
No
 - 10.12.2019 SB2019121019
SB2019121201
SB2019121209
and 11 more
#VU22542 - Improper Validation of Integrity Check Value
CVE-2019-13496		 CWE-354 High
No
No
 - 06.11.2019 SB2019110633
SB2019121201
SB2019121824
and 6 more
#VU22528 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2019-13498		 CWE-300 Medium
No
No
 - 05.11.2019 SB2019072920
SB2019121201
SB2019121824
and 6 more
#VU22527 - Cross-Site Request Forgery (CSRF)
CVE-2019-13497		 CWE-352 Low
No
No
 - 05.11.2019 SB2019110633
SB2019121201
SB2019121824
and 6 more
#VU22429 - Heap-based Buffer Overflow
CVE-2019-18224		 CWE-122 High
No
No
 - 30.10.2019 SB2019102108
SB2019103006
SB2019120309
and 9 more
#VU22428 - Improper input validation
CVE-2019-12290		 CWE-20 Low
No
No
 - 30.10.2019 SB2019102227
SB2019103006
SB2019120309
and 14 more
#VU21331 - Type confusion
CVE-2019-13519		 CWE-843 High
No
No
 - 25.09.2019 SB2019080109
SB2019121201
SB2020012916
and 2 more
#VU21083 - Memory corruption
CVE-2019-13484		 CWE-119 High
No
No
 - 12.09.2019 SB2019091204
SB2019121201
SB2019121824
and 7 more
#VU21082 - Stack-based buffer overflow
CVE-2019-13486		 CWE-121 High
No
No
 - 12.09.2019 SB2019091204
SB2019121201
SB2019121824
and 7 more
#VU21060 - Stack-based buffer overflow
CVE-2019-13485		 CWE-121 Medium
No
No
 - 11.09.2019 SB2019091204
SB2019121201
SB2019121824
and 7 more
#VU19390 - Information Exposure Through Log Files
CVE-2019-13509		 CWE-532 Medium
No
No
 - 26.07.2019 SB2019091012
SB2019110702
SB2019121201
and 7 more
#VU19241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13505		 CWE-79 Low
No
No
 - 18.07.2019 SB2019070912
SB2019121201
SB2020012916
and 3 more
#VU19220 - Out-of-bounds read
CVE-2019-13504		 CWE-125 Low
No
No
 - 17.07.2019 SB2019071707
SB2019121201
SB2020012916
and 7 more
#VU18149 - UNIX Symbolic Link (Symlink) Following
CVE-2019-3880		 CWE-61 Low
No
No
 - 08.04.2019 SB2019040801
SB2019040805
SB2019040807
and 14 more
#VU17364 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-3464		 CWE-78 High
No
No
 - 04.02.2019 SB2019020403
SB2019041107
SB2019122002
and 6 more
#VU17363 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-3463		 CWE-78 High
No
No
 - 04.02.2019 SB2019020403
SB2019041107
SB2019122002
and 6 more
#VU17336 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-1000018		 CWE-78 High
No
No
 - 31.01.2019 SB2019013111
SB2019041107
SB2019122002
and 6 more


Showing elements 2421 - 2440 out of 3943