Known vulnerabilities in Amazon Linux AMI - page 26

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97423 - State Issues
CVE-2024-24968		 CWE-371 Low
No
No
 - 17.09.2024 SB2024091723
SB2024091725
SB2024091726
and 18 more
#VU97100 - Privilege Defined With Unsafe Actions
CVE-2019-14865		 CWE-267 Low
No
No
 - 10.09.2024 SB2019112921
SB20240910138
SB20240910146
and 8 more
#VU96700 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40030		 CWE-79 Low
No
No
 - 02.09.2024 SB2023082454
SB2024090228
SB2024071831
and 2 more
#VU96240 - Improper isolation or compartmentalization
CVE-2023-49141		 CWE-653 Low
No
No
 - 20.08.2024 SB2024082017
SB2024082039
SB2024082040
and 4 more
#VU96214 - Protection Mechanism Failure
CVE-2024-24980		 CWE-693 Low
No
No
 - 19.08.2024 SB20240819158
SB2024082039
SB2024082040
and 12 more
#VU95441 - Missing release of memory after effective lifetime
CVE-2024-26462		 CWE-401 Medium
No
No
 - 07.08.2024 SB2024040939
SB2024080724
SB2024080725
and 18 more
#VU94223 - Use After Free
CVE-2024-39494		 CWE-416 Low
No
No
 - 13.07.2024 SB2024071323
SB2024071701
SB2024072667
and 45 more
#VU93827 - Memory corruption
CVE-2024-39480		 CWE-119 Low
No
No
 - 05.07.2024 SB2024070566
SB2024071626
SB2024072140
and 33 more
#VU91160 - Improper input validation
CVE-2024-24790		 CWE-20 Medium
No
No
 - 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU88226 - Missing release of memory after effective lifetime
CVE-2024-26461		 CWE-401 Medium
No
No
 - 09.04.2024 SB2024040939
SB2024040943
SB20240611102
and 46 more
#VU88225 - Missing release of memory after effective lifetime
CVE-2024-26458		 CWE-401 Medium
No
No
 - 09.04.2024 SB2024040938
SB2024040943
SB20240611102
and 47 more
#VU88184 - Resource exhaustion
CVE-2023-45288		 CWE-400 Medium
Available
No
 - 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU87164 - Resource Management Errors
CVE-2024-1048		 CWE-399 Low
No
No
 - 06.03.2024 SB2024030663
SB2024030664
SB2024043039
and 7 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708		 CWE-614 Low
No
No
 - 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143		 CWE-94 Medium
No
No
 - 03.01.2023 SB2023010329
SB2023012516
SB2023012606
and 34 more
#VU67714 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43980		 CWE-200 Low
No
No
 - 28.09.2022 SB2022092818
SB2022103001
SB2022111642
and 20 more
#VU62038 - Resource exhaustion
CVE-2022-23772		 CWE-400 Medium
No
No
 - 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 40 more
#VU62037 - Incorrect Authorization
CVE-2022-23773		 CWE-863 Low
Available
No
 - 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 39 more
#VU62036 - Unchecked Return Value
CVE-2022-23806		 CWE-252 Medium
No
No
 - 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU50779 - Reachable Assertion
CVE-2021-27212		 CWE-617 Medium
No
No
 - 17.02.2021 SB2021021717
SB2021022225
SB2021022613
and 13 more


Showing elements 501 - 520 out of 3943