Known vulnerabilities in Amazon Linux AMI - page 125

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22938 - Memory corruption
CVE-2018-10689		 CWE-119 Low
No
No
 - 23.11.2019 SB2018050313
SB2019112305
SB2019080636
and 6 more
#VU22782 - Resource Management Errors
CVE-2019-11139		 CWE-399 Low
No
No
 - 14.11.2019 SB2019111425
SB2019111427
SB2019111428
and 10 more
#VU22712 - Memory corruption
CVE-2018-12207		 CWE-119 Low
No
No
 - 12.11.2019 SB2019111221
SB2019111301
SB2019111332
and 38 more
#VU22704 - Resource Management Errors
CVE-2019-11135		 CWE-399 Low
No
No
 - 12.11.2019 SB2019111216
SB2019111332
SB2019111333
and 60 more
#VU22304 - Memory corruption
CVE-2019-11043		 CWE-119 High
Available
Exploited
 - 27.10.2019 SB2019102707
SB2019102708
SB2019102709
and 22 more
#VU21564 - NULL Pointer Dereference
CVE-2019-12412		 CWE-476 Medium
No
No
 - 05.10.2019 SB2019100502
SB2019100607
SB2019112302
and 6 more
#VU21399 - Heap-based Buffer Overflow
CVE-2019-16928		 CWE-122 High
No
Exploited
 - 28.09.2019 SB2019092805
SB2019092806
SB2019092807
and 11 more
#VU20954 - Command injection
CVE-2019-13139		 CWE-77 Low
No
No
 - 10.09.2019 SB2019091002
SB2019091012
SB2019110702
#VU20924 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-15846		 CWE-78 High
Available
No
 - 06.09.2019 SB2019090614
SB2019090615
SB2019090616
and 11 more
#VU20386 - Use After Free
CVE-2019-10082		 CWE-416 Medium
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU20385 - NULL Pointer Dereference
CVE-2019-10097		 CWE-476 Low
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 14 more
#VU20384 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10092		 CWE-79 Low
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU20374 - Improper input validation
CVE-2019-10098		 CWE-20 Medium
Available
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 19 more
#VU20373 - Out-of-bounds write
CVE-2019-10081		 CWE-787 Medium
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 11 more
#VU20340 - Resource Management Errors
CVE-2019-9517		 CWE-399 Medium
No
No
 - 20.08.2019 SB2019082303
SB2019082610
SB2019090202
and 37 more
#VU19590 - Improper input validation
CVE-2019-0203		 CWE-20 Medium
No
No
 - 31.07.2019 SB2019073104
SB2019073107
SB2019080106
and 10 more
#VU19589 - Reachable Assertion
CVE-2018-11782		 CWE-617 Medium
No
No
 - 31.07.2019 SB2019073104
SB2019073107
SB2019080106
and 12 more
#VU16990 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-6109		 CWE-451 Low
No
No
 - 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 13 more
#VU16988 - Improper input validation
CVE-2019-6111		 CWE-20 Low
Available
No
 - 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 17 more
#VU16946 - Improper Access Control
CVE-2018-20685		 CWE-284 Low
No
No
 - 10.01.2019 SB2019011505
SB2019012805
SB2019012904
and 14 more


Showing elements 2481 - 2500 out of 3943