Known vulnerabilities in Amazon Linux AMI - page 123

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU23492 - Improper input validation
CVE-2019-1352		 CWE-20 High
No
No
 - 10.12.2019 SB2019121019
SB2019121201
SB2019121207
and 18 more
#VU22639 -
CVE-2019-13539		 Low
No
No
 - 11.11.2019 SB2019111108
SB2019121201
SB2020012916
and 2 more
#VU22638 - Protection Mechanism Failure
CVE-2019-13535		 CWE-693 Low
No
No
 - 11.11.2019 SB2019111108
SB2019121201
SB2020012916
and 2 more
#VU22637 - Improper Authentication
CVE-2019-13531		 CWE-287 Low
No
No
 - 11.11.2019 SB2019111108
SB2019121201
SB2020012916
and 2 more
#VU22283 - Missing Authentication for Critical Function
CVE-2019-13525		 CWE-306 Medium
No
No
 - 25.10.2019 SB2019102505
SB2019121201
SB2019121824
and 6 more
#VU21935 - Stack-based buffer overflow
CVE-2019-13537		 CWE-121 Medium
No
No
 - 18.10.2019 SB2019101805
SB2019121201
SB2020012916
and 2 more
#VU21726 - Cross-Site Request Forgery (CSRF)
CVE-2019-13529		 CWE-352 Low
Available
No
 - 11.10.2019 SB2019101105
SB2019121201
SB2019121824
and 6 more
#VU21332 - Command injection
CVE-2019-13521		 CWE-77 High
No
No
 - 25.09.2019 SB2019080109
SB2019121201
SB2019121824
and 6 more
#VU21330 - Access of Uninitialized Pointer
CVE-2019-13527		 CWE-824 High
No
No
 - 25.09.2019 SB2019080109
SB2019121201
SB2019121824
and 7 more
#VU21231 - Improper Authorization
CVE-2019-13528		 CWE-285 Low
No
No
 - 20.09.2019 SB2019092007
SB2019121201
SB2019121824
and 6 more
#VU21209 - Improper Access Control
CVE-2019-13523		 CWE-284 Medium
No
No
 - 19.09.2019 SB2019091910
SB2019121201
SB2019121824
and 6 more
#VU21105 - Download of Code Without Integrity Check
CVE-2019-13534		 CWE-494 Medium
No
No
 - 13.09.2019 SB2019091305
SB2019121201
SB2020012916
and 2 more
#VU21104 - Use of Hard-coded Password
CVE-2019-13530		 CWE-259 Medium
No
No
 - 13.09.2019 SB2019091305
SB2019121201
SB2020012916
and 2 more
#VU21102 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-13532		 CWE-22 Medium
No
No
 - 13.09.2019 SB2019091304
SB2019121201
SB2020012916
and 2 more
#VU21101 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13538		 CWE-79 Low
No
No
 - 13.09.2019 SB2019091304
SB2019121201
SB2020012916
and 2 more
#VU20839 - Memory corruption
CVE-2019-13522		 CWE-119 High
No
No
 - 04.09.2019 SB2019090403
SB2019121201
SB2019121824
and 6 more
#VU20419 - Authentication Bypass Using an Alternate Path or Channel
CVE-2019-13526		 CWE-288 Medium
No
No
 - 28.08.2019 SB2019082808
SB2019121201
SB2019121824
and 6 more
#VU20351 - Use After Free
CVE-2019-13514		 CWE-416 Low
No
No
 - 21.08.2019 SB2019082107
SB2019121201
SB2020012916
and 2 more
#VU20350 - Out-of-bounds read
CVE-2019-13513		 CWE-125 Low
No
No
 - 21.08.2019 SB2019082107
SB2019121201
SB2020012916
and 2 more
#VU20346 - Stack-based buffer overflow
CVE-2019-13520		 CWE-121 High
No
No
 - 21.08.2019 SB2019082104
SB2019121201
SB2019121824
and 6 more


Showing elements 2441 - 2460 out of 3943