Known vulnerabilities in Amazon Linux AMI - page 183

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU41241 - Improper Link Resolution Before File Access ('Link Following')
CVE-2014-1875		 CWE-59 Medium
No
No
 - 07.10.2014 SB2014100705
SB2014061505
#VU32528 - Improper input validation
CVE-2014-3469		 CWE-20 Medium
No
No
 - 05.06.2014 SB2014060507
SB2014060903
SB2014072402
and 7 more
#VU33843 - Improper input validation
CVE-2014-3467		 CWE-20 Medium
No
No
 - 05.06.2014 SB2014060510
SB2014060901
SB2014072402
and 7 more
#VU33844 - Improper input validation
CVE-2014-3468		 CWE-20 Medium
No
No
 - 05.06.2014 SB2014060511
SB2014060902
SB2014072402
and 7 more
#VU32530 - Memory corruption
CVE-2014-3466		 CWE-119 Medium
No
No
 - 03.06.2014 SB2014060301
SB2014060401
SB2014061304
and 5 more
#VU41759 - Improper input validation
CVE-2014-2709		 CWE-20 Medium
No
No
 - 23.04.2014 SB2014042307
SB2014060305
SB2014040808
and 1 more
#VU41761 - Cross-Site Request Forgery (CSRF)
CVE-2014-2327		 CWE-352 Medium
No
No
 - 23.04.2014 SB2014060305
SB2014040808
SB2014040809
#VU41762 - Improper input validation
CVE-2014-2328		 CWE-20 Low
No
No
 - 23.04.2014 SB2014060305
SB2014040808
SB2014040809
#VU32538 - Improper input validation
CVE-2014-0128		 CWE-20 Medium
No
No
 - 14.04.2014 SB2014041401
SB2014042802
SB2014102215
and 2 more
#VU41840 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-2708		 CWE-89 Medium
No
No
 - 10.04.2014 SB2014041003
SB2014060305
SB2014040808
and 1 more
#VU41887 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-2326		 CWE-79 Low
No
No
 - 27.03.2014 SB2014060305
SB2014040808
SB2014040809
#VU32559 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-2323		 CWE-89 Medium
Available
No
 - 14.03.2014 SB2014031402
SB2014031318
SB2014060306
and 4 more
#VU32560 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-2324		 CWE-22 Medium
Available
No
 - 14.03.2014 SB2014031403
SB2014031319
SB2014060306
and 3 more
#VU42235 - Memory corruption
CVE-2013-7038		 CWE-119 Medium
No
No
 - 13.12.2013 SB2013121305
SB2014061507
SB2014020205
#VU42236 - Stack-based buffer overflow
CVE-2013-7039		 CWE-121 Medium
No
No
 - 13.12.2013 SB2013121305
SB2014061507
SB2014020205
#VU42352 - Memory corruption
CVE-2013-4588		 CWE-119 Low
No
No
 - 20.11.2013 SB2013112006
SB2014061506
#VU32525 - Memory corruption
CVE-2013-4244		 CWE-119 Medium
No
No
 - 28.09.2013 SB2013092802
SB2014062402
SB2014062601
and 2 more
#VU31835 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4243		 CWE-94 Medium
No
No
 - 10.09.2013 SB2013091001
SB2014062401
SB2014062601
#VU31838 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4232		 CWE-94 Medium
No
No
 - 10.09.2013 SB2013091002
SB2013110602
SB2014062601
and 2 more
#VU2950 - Cryptographic Issues
CVE-2014-0224		 CWE-310 Medium
Available
No
 - 30.11.-0001 SB2014060501
SB2014060502
SB2014060503
and 42 more


Showing elements 3641 - 3660 out of 3943