Known vulnerabilities in Amazon Linux AMI - page 168

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU264 - Improper Control of Generation of Code ('Code Injection')
CVE-2016-0714		 CWE-94 Low
No
No
 - 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU263 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0706		 CWE-200 Low
No
No
 - 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU262 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5345		 CWE-200 Low
No
No
 - 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU261 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-5174		 CWE-22 Low
No
No
 - 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU242 - UNIX Symbolic Link (Symlink) Following
CVE-2015-7560		 CWE-61 Medium
No
No
 - 29.07.2016 SB2016032901
SB2016032401
SB2016032102
and 12 more
#VU241 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2118		 CWE-300 High
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU240 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2115		 CWE-300 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 24 more
#VU239 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2114		 CWE-300 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 11 more
#VU238 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2113		 CWE-300 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 16 more
#VU237 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2112		 CWE-300 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 24 more
#VU236 - Authentication Bypass by Spoofing
CVE-2016-2111		 CWE-290 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU235 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2110		 CWE-300 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU234 - Resource exhaustion
CVE-2015-5370		 CWE-400 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 22 more
#VU40283 - Stack-based buffer overflow
CVE-2016-2554		 CWE-121 High
No
No
 - 16.05.2016 SB2016051611
SB2016041327
#VU33068 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0787		 CWE-200 Medium
No
No
 - 13.04.2016 SB2016041318
SB2016022415
SB2016040604
and 2 more
#VU32318 - Heap-based Buffer Overflow
CVE-2016-2324		 CWE-122 High
No
No
 - 08.04.2016 SB2016040807
SB2016031701
SB2016031702
and 10 more
#VU32317 - Heap-based Buffer Overflow
CVE-2016-2315		 CWE-122 High
No
No
 - 08.04.2016 SB2016040806
SB2016031701
SB2016031702
and 10 more
#VU32307 - Memory corruption
CVE-2015-8631		 CWE-119 Medium
No
No
 - 13.02.2016 SB2016021303
SB2016022214
SB2016042112
and 3 more
#VU32306 - NULL Pointer Dereference
CVE-2015-8630		 CWE-476 Medium
No
No
 - 13.02.2016 SB2016021302
SB2016022213
SB2016042112
and 3 more
#VU42616 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-5588		 CWE-79 Low
No
No
 - 29.08.2013 SB2016032409
SB2013083007
SB2013083008


Showing elements 3341 - 3360 out of 3943