Known vulnerabilities in Amazon Linux AMI - page 146

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12274 - Security Features
CVE-2017-15706		 CWE-254 Low
No
No
 - 27.04.2018 SB2018032107
SB2018022023
SB2018020715
and 3 more
#VU12162 - Command injection
CVE-2018-6574		 CWE-77 Low
Available
No
 - 25.04.2018 SB2018020920
SB2018020921
SB2018030716
and 8 more
#VU11651 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1000078		 CWE-79 Low
No
No
 - 10.04.2018 SB2018040507
SB2018061002
SB2018080117
and 12 more
#VU11650 - Deserialization of Untrusted Data
CVE-2018-1000074		 CWE-502 High
No
No
 - 10.04.2018 SB2018040507
SB2018061002
SB2018080117
and 13 more
#VU11615 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-1000079		 CWE-22 Low
No
No
 - 08.04.2018 SB2018021520
SB2018040507
SB2018061002
and 13 more
#VU11302 - Out-of-bounds read
CVE-2018-0202		 CWE-125 Low
No
No
 - 28.03.2018 SB2018032105
SB2018032807
SB2018040305
and 7 more
#VU11145 - Permissions, Privileges, and Access Controls
CVE-2018-1068		 CWE-264 Low
No
No
 - 19.03.2018 SB2018031903
SB2018021909
SB2018032313
and 53 more
#VU11216 - Heap-based Buffer Overflow
CVE-2017-6419		 CWE-122 High
No
No
 - 18.03.2018 SB2017081723
SB2018031804
SB2017081806
and 25 more
#VU11217 - Buffer over-read
CVE-2017-11423		 CWE-126 Low
No
No
 - 18.03.2018 SB2017081723
SB2018031804
SB2017081806
and 18 more
#VU11136 - Out-of-bounds read
CVE-2018-1000085		 CWE-125 Low
No
No
 - 16.03.2018 SB2017092907
SB2018031804
SB2018032105
and 10 more
#VU11125 - Exposure of sensitive information to an unauthorized actor
CVE-2018-6594		 CWE-200 Low
No
No
 - 16.03.2018 SB2018022314
SB2018032306
SB2020073117
and 10 more
#VU10800 - Stack-based buffer overflow
CVE-2018-7584		 CWE-121 Low
No
No
 - 01.03.2018 SB2018030106
SB2018030803
SB2018032605
and 10 more
#VU10729 - Improper input validation
CVE-2017-15698		 CWE-20 Low
No
No
 - 27.02.2018 SB2018021701
SB2018022702
SB2018030901
and 3 more
#VU10707 - Permissions, Privileges, and Access Controls
CVE-2018-1304		 CWE-264 Low
No
No
 - 26.02.2018 SB2018022601
SB2018032308
SB2018032107
and 11 more
#VU10706 - Permissions, Privileges, and Access Controls
CVE-2018-1305		 CWE-264 Low
No
No
 - 26.02.2018 SB2018022601
SB2018032308
SB2018032107
and 8 more
#VU10277 - Improper input validation
CVE-2018-2565		 CWE-20 Low
No
No
 - 22.01.2018 SB2018012204
SB2018012205
SB2018030902
and 3 more
#VU10279 - Improper input validation
CVE-2018-2667		 CWE-20 Low
No
No
 - 22.01.2018 SB2018012204
SB2018012205
SB2018030902
and 3 more
#VU10280 - Improper input validation
CVE-2018-2590		 CWE-20 Low
No
No
 - 22.01.2018 SB2018012204
SB2018012205
SB2018030902
and 6 more
#VU8815 - Deserialization of Untrusted Data
CVE-2017-0903		 CWE-502 High
No
No
 - 13.10.2017 SB2017101301
SB2017111201
SB2017121902
and 10 more
#VU8602 - Integer overflow
CVE-2012-6706		 CWE-190 High
Available
No
 - 25.09.2017 SB2017092611
SB2017082105
SB2017102202
and 15 more


Showing elements 2901 - 2920 out of 3943