Known vulnerabilities in Amazon Linux AMI - page 129

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU20194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8321		 CWE-79 Low
No
No
 - 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 9 more
#VU20193 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-8320		 CWE-22 Low
No
No
 - 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 8 more
#VU20192 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8323		 CWE-79 Low
No
No
 - 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 10 more
#VU20191 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8322		 CWE-79 Low
No
No
 - 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 10 more
#VU20190 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8325		 CWE-79 Low
No
No
 - 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 10 more
#VU20189 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-8324		 CWE-94 Medium
No
No
 - 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 11 more
#VU20071 - Improper input validation
CVE-2019-10160		 CWE-20 Low
No
No
 - 13.08.2019 SB2019081309
SB2019081310
SB2019062005
and 20 more
#VU20063 - Resource Management Errors
CVE-2019-3883		 CWE-399 Low
No
No
 - 13.08.2019 SB2019081305
SB2019041711
SB2019072915
and 1 more
#VU33424 - Improper input validation
CVE-2019-2769		 CWE-20 Medium
No
No
 - 24.07.2019 SB2019081541
SB2019080144
SB2019082723
and 19 more
#VU33425 - Improper Access Control
CVE-2019-2816		 CWE-284 Medium
No
No
 - 24.07.2019 SB2019081541
SB2019080146
SB2019082723
and 21 more
#VU33426 - Improper input validation
CVE-2019-2842		 CWE-20 Low
No
No
 - 24.07.2019 SB2019081541
SB2019080147
SB2019082723
and 9 more
#VU19281 - Protection Mechanism Failure
CVE-2019-2786		 CWE-693 Low
No
No
 - 22.07.2019 SB2019072218
SB2019081541
SB2019080145
and 18 more
#VU18827 - Exposed Dangerous Method or Function
CVE-2019-9948		 CWE-749 Medium
No
No
 - 19.06.2019 SB2019031318
SB2019061903
SB2019042504
and 18 more
#VU33427 - Improper Access Control
CVE-2019-2602		 CWE-284 Medium
No
No
 - 23.04.2019 SB2019060321
SB2019052329
SB2019052330
and 21 more
#VU33428 - Improper Access Control
CVE-2019-2684		 CWE-284 Medium
No
No
 - 23.04.2019 SB2019060321
SB2019052329
SB2019052330
and 18 more
#VU18254 - Out-of-bounds write
CVE-2019-3863		 CWE-787 Medium
No
No
 - 15.04.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU18025 - Integer overflow
CVE-2019-3857		 CWE-190 Medium
No
No
 - 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU18024 - Integer overflow
CVE-2019-3855		 CWE-190 Medium
No
No
 - 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 22 more
#VU18023 - Integer overflow
CVE-2019-3856		 CWE-190 Medium
No
No
 - 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU15757 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-19052		 CWE-22 Low
No
No
 - 08.11.2018 SB2018110801
SB2019081301
SB2019102101


Showing elements 2561 - 2580 out of 3943