Known vulnerabilities in Amazon Linux AMI - page 125

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22304 - Memory corruption
CVE-2019-11043		 CWE-119 High
Available
Exploited
 - 27.10.2019 SB2019102707
SB2019102708
SB2019102709
and 22 more
#VU21782 - Permissions, Privileges, and Access Controls
CVE-2019-14287		 CWE-264 Low
Available
No
 - 15.10.2019 SB2019101501
SB2019101502
SB2019101503
and 27 more
#VU21399 - Heap-based Buffer Overflow
CVE-2019-16928		 CWE-122 High
No
Exploited
 - 28.09.2019 SB2019092805
SB2019092806
SB2019092807
and 11 more
#VU20954 - Command injection
CVE-2019-13139		 CWE-77 Low
No
No
 - 10.09.2019 SB2019091002
SB2019091012
SB2019110702
#VU20411 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-20969		 CWE-78 High
No
No
 - 27.08.2019 SB2019091721
SB2019100311
SB2019102601
and 4 more
#VU20386 - Use After Free
CVE-2019-10082		 CWE-416 Medium
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU20385 - NULL Pointer Dereference
CVE-2019-10097		 CWE-476 Low
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 14 more
#VU20384 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10092		 CWE-79 Low
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU20374 - Improper input validation
CVE-2019-10098		 CWE-20 Medium
Available
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 19 more
#VU20373 - Out-of-bounds write
CVE-2019-10081		 CWE-787 Medium
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 11 more
#VU20340 - Resource Management Errors
CVE-2019-9517		 CWE-399 Medium
No
No
 - 20.08.2019 SB2019082303
SB2019082610
SB2019090202
and 37 more
#VU19590 - Improper input validation
CVE-2019-0203		 CWE-20 Medium
No
No
 - 31.07.2019 SB2019073104
SB2019073107
SB2019080106
and 10 more
#VU19504 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-13638		 CWE-78 Low
No
No
 - 28.07.2019 SB2019072704
SB2019081805
SB2019091721
and 7 more
#VU19390 - Information Exposure Through Log Files
CVE-2019-13509		 CWE-532 Medium
No
No
 - 26.07.2019 SB2019091012
SB2019110702
SB2019121201
and 7 more
#VU16990 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-6109		 CWE-451 Low
No
No
 - 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 13 more
#VU16988 - Improper input validation
CVE-2019-6111		 CWE-20 Low
Available
No
 - 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 17 more
#VU16946 - Improper Access Control
CVE-2018-20685		 CWE-284 Low
No
No
 - 10.01.2019 SB2019011505
SB2019012805
SB2019012904
and 14 more
#VU16727 - Use After Free
CVE-2018-1000878		 CWE-416 Low
No
No
 - 27.12.2018 SB2018122014
SB2018122801
SB2019041207
and 13 more
#VU16726 - Double Free
CVE-2018-1000877		 CWE-415 Low
No
No
 - 20.12.2018 SB2018122014
SB2018122801
SB2019041207
and 13 more
#VU15955 - Out-of-bounds read
CVE-2017-14503		 CWE-125 Low
No
No
 - 19.11.2018 SB2017091705
SB2018111908
SB2018111909
and 9 more


Showing elements 2481 - 2500 out of 3943