Known vulnerabilities in Amazon Linux AMI - page 143

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12327 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-10547		 CWE-79 Low
No
No
 - 01.05.2018 SB2018042612
SB2018050902
SB2018051104
and 12 more
#VU12270 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2017-12132		 CWE-451 Low
No
No
 - 27.04.2018 SB2018022812
SB2018022022
SB2018021521
and 8 more
#VU12269 - NULL Pointer Dereference
CVE-2015-5180		 CWE-476 Low
No
No
 - 27.04.2018 SB2016123103
SB2018051109
SB2018041055
and 7 more
#VU12268 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2014-9402		 CWE-835 Low
No
No
 - 27.04.2018 SB2014112002
SB2018051109
SB2018041055
and 3 more
#VU12258 - Memory corruption
CVE-2018-10549		 CWE-119 Low
No
No
 - 26.04.2018 SB2018042612
SB2018051111
SB2018051702
and 8 more
#VU12257 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-10546		 CWE-835 Low
No
No
 - 26.04.2018 SB2018042612
SB2018050902
SB2018051104
and 11 more
#VU12256 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-10548		 CWE-300 Low
No
No
 - 26.04.2018 SB2018042612
SB2018050902
SB2018051104
and 12 more
#VU11544 - Memory corruption
CVE-2017-15670		 CWE-119 High
No
No
 - 05.04.2018 SB2018011022
SB2018011023
SB2018040501
and 10 more
#VU11546 - Buffer overflow
CVE-2017-15804		 CWE-120 High
No
No
 - 04.04.2018 SB2018040501
SB2018051109
SB2018062019
and 9 more
#VU11287 - NULL Pointer Dereference
CVE-2018-1302		 CWE-476 Medium
No
No
 - 27.03.2018 SB2018032703
SB2018040502
SB2018050401
and 7 more
#VU11284 - Permissions, Privileges, and Access Controls
CVE-2017-15715		 CWE-264 Low
No
No
 - 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 13 more
#VU11283 - Out-of-bounds write
CVE-2017-15710		 CWE-787 Medium
No
No
 - 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 13 more
#VU11282 - Improper input validation
CVE-2018-1283		 CWE-20 Low
No
No
 - 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 12 more
#VU11281 - Out-of-bounds read
CVE-2018-1301		 CWE-125 Medium
No
No
 - 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 13 more
#VU11280 - Out-of-bounds read
CVE-2018-1303		 CWE-125 Medium
No
No
 - 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 12 more
#VU11279 - Permissions, Privileges, and Access Controls
CVE-2018-1312		 CWE-264 Low
No
No
 - 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 12 more
#VU10806 - Permissions, Privileges, and Access Controls
CVE-2016-1549		 CWE-264 Low
No
No
 - 01.03.2018 SB2018030111
SB2018030202
SB2018031610
and 6 more
#VU9992 - Buffer Underwrite ('Buffer Underflow')
CVE-2018-1000001		 CWE-124 Low
Available
No
 - 12.01.2018 SB2018011202
SB2018011207
SB2018011710
and 18 more
#VU9333 - Permissions, Privileges, and Access Controls
CVE-2017-15906		 CWE-264 Low
No
No
 - 15.11.2017 SB2017111501
SB2017111502
SB2018010803
and 14 more
#VU623 - Improper Access Control
CVE-2015-7704		 CWE-284 Low
No
No
 - 22.09.2016 SB2018051113


Showing elements 2841 - 2860 out of 3943