Known vulnerabilities in Amazon Linux AMI - page 30

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87166 - Improper Check for Unusual or Exceptional Conditions
CVE-2023-52429		 CWE-754 Low
No
No
 - 06.03.2024 SB2024030644
SB2024030653
SB2024030654
and 19 more
#VU86728 - Inconsistency Between Implementation and Documented Design
CVE-2024-21890		 CWE-1068 Low
No
No
 - 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86726 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-21891		 CWE-22 Medium
No
No
 - 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86723 - Improper Privilege Management
CVE-2024-22017		 CWE-269 Low
No
No
 - 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86722 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-21896		 CWE-22 Medium
No
No
 - 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86707 - Server-Side Request Forgery (SSRF)
CVE-2024-24806		 CWE-918 Medium
No
No
 - 22.02.2024 SB2024022210
SB2024022214
SB2024022225
and 54 more
#VU86578 - Use After Free
CVE-2024-1085		 CWE-416 Low
No
No
 - 19.02.2024 SB2024021924
SB2024021926
SB2024021937
and 35 more
#VU86424 - Improper input validation
CVE-2024-21386		 CWE-20 Medium
No
No
 - 13.02.2024 SB2024021351
SB2024021358
SB2024021359
and 8 more
#VU86423 - Improper input validation
CVE-2024-21404		 CWE-20 Medium
No
No
 - 13.02.2024 SB2024021351
SB2024021358
SB2024021359
and 14 more
#VU86276 - Incorrect Default Permissions
CVE-2024-24821		 CWE-276 Low
No
No
 - 08.02.2024 SB2024020870
SB2024021508
SB2024022241
and 3 more
#VU86275 - Improper Privilege Management
CVE-2024-0985		 CWE-269 Medium
No
No
 - 08.02.2024 SB2024020869
SB2024021617
SB2024021637
and 62 more
#VU86049 - Insufficient Verification of Data Authenticity
CVE-2024-24557		 CWE-345 Medium
No
No
 - 02.02.2024 SB2024020242
SB2024032237
SB2024032712
and 18 more
#VU86039 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-23650		 CWE-754 Medium
No
No
 - 02.02.2024 SB2024020229
SB2024022911
SB20240611189
and 11 more
#VU86038 - Incorrect Authorization
CVE-2024-23653		 CWE-863 High
Available
No
 - 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 23 more
#VU86037 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-23652		 CWE-22 Medium
No
No
 - 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 20 more
#VU86035 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-23651		 CWE-362 Medium
No
No
 - 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 20 more
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553		 CWE-208 Medium
No
No
 - 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more
#VU85211 - Improper input validation
CVE-2024-20672		 CWE-20 Medium
No
No
 - 09.01.2024 SB2024010973
SB2024022208
SB20240806242
#VU85169 - Heap-based Buffer Overflow
CVE-2023-41056		 CWE-122 High
No
No
 - 09.01.2024 SB2024010919
SB2024010921
SB2024010922
and 10 more
#VU83316 - Information Exposure Through Timing Discrepancy
CVE-2023-5981		 CWE-208 Medium
No
No
 - 20.11.2023 SB2023112075
SB2023112145
SB2023120164
and 79 more


Showing elements 581 - 600 out of 3943