Known vulnerabilities in Amazon Linux AMI - page 190

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU42854 - Permissions, Privileges, and Access Controls
CVE-2012-4481		 CWE-264 Medium
No
No
 - 02.05.2013 SB2013050207
SB2013031511
#VU42855 - Exposure of sensitive information to an unauthorized actor
CVE-2012-5657		 CWE-200 Medium
No
No
 - 02.05.2013 SB2013021306
SB2013020401
SB2013010103
#VU42928 - Improper input validation
CVE-2013-1821		 CWE-20 Medium
No
No
 - 10.04.2013 SB2012112404
SB2013052425
SB2013031511
#VU31839 - Memory corruption
CVE-2013-2266		 CWE-119 Medium
No
No
 - 28.03.2013 SB2013032802
SB2013040407
SB2013032704
and 1 more
#VU31840 - Memory corruption
CVE-2013-2266		 CWE-119 Medium
No
No
 - 28.03.2013 SB2013032803
SB2013040101
SB2013040102
and 3 more
#VU32702 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-3499		 CWE-79 Low
No
No
 - 26.02.2013 SB2013022603
SB2013041101
SB2013032621
and 2 more
#VU32703 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4558		 CWE-79 Low
No
No
 - 26.02.2013 SB2013022604
SB2013041102
SB2013032621
and 2 more
#VU43084 - Improper input validation
CVE-2012-4398		 CWE-20 Medium
No
No
 - 18.02.2013 SB2013021803
SB2013030201
#VU43085 - Exposure of sensitive information to an unauthorized actor
CVE-2012-4530		 CWE-200 Low
Available
No
 - 18.02.2013 SB2013021804
SB2013041303
SB2013030201
#VU43090 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2013-0871		 CWE-362 High
No
No
 - 18.02.2013 SB2013021809
SB2013041303
SB2013022504
and 1 more
#VU32712 - Cryptographic Issues
CVE-2013-1619		 CWE-310 Medium
No
No
 - 08.02.2013 SB2013020802
SB2013040804
SB2014030404
and 6 more
#VU32698 - Memory corruption
CVE-2012-5669		 CWE-119 Medium
No
No
 - 24.01.2013 SB2013012402
SB2013041208
SB2013020304
and 2 more
#VU43162 - Improper input validation
CVE-2012-4461		 CWE-20 Low
No
No
 - 23.01.2013 SB2013012306
SB2013030201
#VU43184 - Improper input validation
CVE-2012-0572		 CWE-20 Low
No
No
 - 17.01.2013 SB2013011702
SB2013020303
#VU43321 - Permissions, Privileges, and Access Controls
CVE-2012-5519		 CWE-264 High
Available
No
 - 20.11.2012 SB2012112003
SB2015061105
SB2013031513
and 1 more
#VU32748 - Heap-based Buffer Overflow
CVE-2012-4447		 CWE-122 Medium
No
No
 - 28.10.2012 SB2012102801
SB2012120601
SB2012122003
and 2 more
#VU33931 - Improper input validation
CVE-2012-3955		 CWE-20 Medium
No
No
 - 14.09.2012 SB2012091402
SB2012103109
SB2013030203
and 1 more
#VU32773 - Heap-based Buffer Overflow
CVE-2012-3401		 CWE-122 Medium
No
No
 - 13.08.2012 SB2012081302
SB2012081514
SB2012122003
#VU43802 - Stack-based buffer overflow
CVE-2011-3148		 CWE-121 Low
No
No
 - 22.07.2012 SB2012072205
SB2011110307
SB2011110308
and 3 more
#VU43803 - Memory corruption
CVE-2011-3149		 CWE-119 Low
No
No
 - 22.07.2012 SB2012072205
SB2011110307
SB2011110308
and 3 more


Showing elements 3781 - 3800 out of 3943