Known vulnerabilities in Amazon Linux AMI - page 169

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU2544 - Stack-based buffer overflow
CVE-2015-7547		 CWE-121 High
Available
No
 - 21.12.2016 SB2016021601
SB2016022301
SB2016021901
and 17 more
#VU33280 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-8604		 CWE-89 High
No
No
 - 12.04.2016 SB2016041221
SB2016030401
SB2016032409
#VU33811 - Improper input validation
CVE-2016-3115		 CWE-20 Medium
Available
No
 - 22.03.2016 SB2016032202
SB2016032208
SB2016031605
and 10 more
#VU32316 - Heap-based Buffer Overflow
CVE-2016-1950		 CWE-122 High
No
No
 - 13.03.2016 SB2016031303
SB2016032405
SB2016031014
#VU32322 - Improper input validation
CVE-2016-1286		 CWE-20 High
No
No
 - 10.03.2016 SB2016031009
SB2016032303
SB2016031804
and 14 more
#VU32321 - Improper input validation
CVE-2016-1285		 CWE-20 Medium
No
No
 - 10.03.2016 SB2016031008
SB2016032303
SB2016031804
and 14 more
#VU32339 - Memory corruption
CVE-2016-0773		 CWE-119 Medium
No
No
 - 17.02.2016 SB2016021703
SB2016021614
SB2016042113
and 5 more
#VU32346 - Improper input validation
CVE-2016-1983		 CWE-20 Medium
No
No
 - 27.01.2016 SB2016012709
SB2016020907
SB2016031016
and 4 more
#VU32345 - Improper input validation
CVE-2016-1982		 CWE-20 Medium
No
No
 - 27.01.2016 SB2016012708
SB2016020906
SB2016031016
and 4 more
#VU33638 - Data Handling
CVE-2015-7575		 CWE-19 Medium
No
No
 - 09.01.2016 SB2016022504
SB2016020909
SB2016020910
and 10 more
#VU33278 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-8377		 CWE-89 Low
No
No
 - 15.12.2015 SB2015121512
SB2016031806
SB2016032409
#VU32404 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-4634		 CWE-89 Medium
No
No
 - 11.08.2015 SB2015081111
SB2015073107
SB2016032409
#VU40710 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-4454		 CWE-89 Medium
No
No
 - 17.06.2015 SB2015061702
SB2016032409
SB2016042408
and 2 more
#VU32418 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-4342		 CWE-89 Medium
No
No
 - 17.06.2015 SB2015061701
SB2015061522
SB2016032409
and 3 more
#VU40712 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2665		 CWE-79 Low
No
No
 - 17.06.2015 SB2015061704
SB2016032409
SB2016042408
and 2 more
#VU33649 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-5025		 CWE-79 Low
No
No
 - 20.10.2014 SB2014102002
SB2014073003
SB2016032409
#VU33656 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-5026		 CWE-79 Low
No
No
 - 20.10.2014 SB2014102003
SB2014073004
SB2016032409
#VU42420 - Improper input validation
CVE-2013-4885		 CWE-20 Medium
Available
No
 - 26.10.2013 SB2016032211
#VU42617 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-5589		 CWE-89 Medium
No
No
 - 29.08.2013 SB2016032409
SB2013083007
SB2013083008
#VU2752 - Use After Free
CVE-2015-7236		 CWE-416 Low
No
No
 - 30.11.-0001 SB2018071608
SB2016031005
SB2016112203
and 5 more


Showing elements 3361 - 3380 out of 3943