Known vulnerabilities in Amazon Linux AMI - page 167

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU5850 - Server-Side Request Forgery (SSRF)
CVE-2016-3718		 CWE-918 High
Available
Exploited
 - 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 5 more
#VU5849 - Exposure of sensitive information to an unauthorized actor
CVE-2016-3717		 CWE-200 Low
Available
No
 - 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 5 more
#VU5848 - Improper input validation
CVE-2016-3716		 CWE-20 Medium
Available
No
 - 17.02.2017 SB2016050301
SB2016051102
SB2016050702
and 4 more
#VU5847 - Improper input validation
CVE-2016-3715		 CWE-20 Medium
Available
Exploited
 - 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 5 more
#VU5846 - Improper input validation
CVE-2016-3714		 CWE-20 Critical
Available
Exploited
 - 17.02.2017 SB2016042801
SB2016050601
SB2016051304
and 8 more
#VU641 - Improper input validation
CVE-2016-2109		 CWE-119 Low
No
No
 - 23.09.2016 SB2016050506
SB2016051903
SB2016051204
and 17 more
#VU640 - Improper input validation
CVE-2016-2105		 CWE-20 Low
No
No
 - 23.09.2016 SB2016050505
SB2016061413
SB2016051903
and 22 more
#VU639 - Improper Access Control
CVE-2016-2107		 CWE-284 High
Available
No
 - 23.09.2016 SB2016050504
SB2016061413
SB2016050514
and 19 more
#VU638 - Buffer overflow
CVE-2016-2108		 CWE-120 High
No
No
 - 23.09.2016 SB2018011609
SB2016051804
SB2016053102
and 28 more
#VU337 - Improper Access Control
CVE-2016-5387		 CWE-284 Medium
No
No
 - 20.08.2016 SB2016080101
SB2016122101
SB2016071805
and 12 more
#VU197 - Resource exhaustion
CVE-2016-3092		 CWE-400 Medium
No
No
 - 22.07.2016 SB2016070602
SB2016070203
SB2016063002
and 20 more
#VU32275 - Security Features
CVE-2016-4971		 CWE-254 High
Available
No
 - 30.06.2016 SB2016063014
SB2016070507
SB2016071408
and 7 more
#VU25 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2016-4450		 CWE-829 Medium
No
No
 - 24.06.2016 SB2016053101
SB2016060202
SB2016060102
and 14 more
#VU32310 - Improper input validation
CVE-2016-3959		 CWE-20 Medium
No
No
 - 23.05.2016 SB2016052303
SB2016042604
SB2016042114
and 4 more
#VU33047 - Heap-based Buffer Overflow
CVE-2015-8863		 CWE-122 High
No
No
 - 06.05.2016 SB2016052608
SB2016060215
SB2016120807
and 3 more
#VU32289 - Improper input validation
CVE-2016-2168		 CWE-20 Medium
No
No
 - 05.05.2016 SB2016050510
SB2016060207
SB2016060213
and 4 more
#VU32288 - Improper Access Control
CVE-2016-2167		 CWE-284 Medium
No
No
 - 05.05.2016 SB2016050509
SB2016060206
SB2016060213
and 4 more
#VU33809 - Improper input validation
CVE-2016-2106		 CWE-20 Medium
No
No
 - 05.05.2016 SB2016050513
SB2016051903
SB2016051204
and 21 more
#VU33277 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2016-3659		 CWE-89 High
No
No
 - 11.04.2016 SB2016041108
SB2016053012
SB2016060212
and 5 more
#VU32305 - Memory corruption
CVE-2015-8629		 CWE-119 Low
No
No
 - 13.02.2016 SB2016021301
SB2016022212
SB2016042112
and 3 more


Showing elements 3321 - 3340 out of 3943