Known vulnerabilities in Amazon Linux AMI - page 137

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU33712 - Improper input validation
CVE-2018-3183		 CWE-20 High
No
No
 - 04.08.2020 SB2018101611
SB2018101612
SB2018101613
and 12 more
#VU33714 - Improper input validation
CVE-2018-3169		 CWE-20 High
No
No
 - 04.08.2020 SB2018101612
SB2018101613
SB2018101910
and 18 more
#VU33715 - Improper input validation
CVE-2018-3149		 CWE-20 High
Available
No
 - 04.08.2020 SB2018101611
SB2018101612
SB2018101613
and 21 more
#VU33720 - Improper input validation
CVE-2018-3139		 CWE-20 Low
No
No
 - 04.08.2020 SB2018101612
SB2018101613
SB2018101910
and 24 more
#VU16549 - Improper input validation
CVE-2017-15705		 CWE-20 Low
No
No
 - 15.12.2018 SB2018121702
SB2018101909
SB2019080608
and 8 more
#VU16311 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-11781		 CWE-94 Low
No
No
 - 06.12.2018 SB2018091602
SB2018121702
SB2018101909
and 9 more
#VU16310 - Improper input validation
CVE-2018-11780		 CWE-20 High
No
No
 - 05.12.2018 SB2018091602
SB2018121702
SB2018101909
and 8 more
#VU15957 - Permissions, Privileges, and Access Controls
CVE-2018-3180		 CWE-264 Low
No
No
 - 19.11.2018 SB2018111910
SB2018101611
SB2018101612
and 27 more
#VU15735 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-12384		 CWE-300 Low
No
No
 - 06.11.2018 SB2018110608
SB2018121303
SB2018123004
and 11 more
#VU15561 - Improper input validation
CVE-2018-14624		 CWE-20 Low
No
No
 - 29.10.2018 SB2018102424
SB2019051510
SB2018092512
#VU15559 - Improper Access Control
CVE-2018-1000805		 CWE-284 High
No
No
 - 24.10.2018 SB2018090720
SB2018102423
SB2018100403
and 14 more
#VU15562 - Permissions, Privileges, and Access Controls
CVE-2018-14638		 CWE-264 Low
No
No
 - 24.10.2018 SB2018102424
SB2018092512
#VU15529 - Improper input validation
CVE-2018-10935		 CWE-20 Low
No
No
 - 23.10.2018 SB2018083010
SB2018102424
SB2019051510
and 2 more
#VU15486 - Out-of-bounds read
CVE-2018-16658		 CWE-125 Low
No
No
 - 23.10.2018 SB2018100511
SB2018110803
SB2018112105
and 4 more
#VU33491 - Improper input validation
CVE-2018-3214		 CWE-20 Medium
No
No
 - 17.10.2018 SB2018101611
SB2018101612
SB2018101613
and 18 more
#VU15292 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-17082		 CWE-79 Low
No
No
 - 10.10.2018 SB2018101016
SB2018100601
SB2018100602
and 9 more
#VU15167 - Command injection
CVE-2018-17456		 CWE-77 High
Available
No
 - 08.10.2018 SB2018100802
SB2018100804
SB2018100904
and 20 more
#VU31212 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-16976		 CWE-362 High
No
No
 - 13.09.2018 SB2018091310
SB2018100514
SB2018101911
and 5 more
#VU13395 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-10850		 CWE-362 Medium
No
No
 - 18.06.2018 SB2018062005
SB2018102424
SB2019051510
and 1 more
#VU13325 - Improper input validation
CVE-2018-0732		 CWE-20 Low
No
No
 - 12.06.2018 SB2018061305
SB2018070906
SB2018073005
and 54 more


Showing elements 2721 - 2740 out of 3943