Known vulnerabilities in Amazon Linux AMI - page 35

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94108 - Resource exhaustion
CVE-2024-26621		 CWE-400 Low
No
No
 - 11.07.2024 SB2024071121
SB20240711193
SB20240806189
#VU91349 - Exposure of sensitive information to an unauthorized actor
CVE-2024-27417		 CWE-200 Low
No
No
 - 08.06.2024 SB2024060872
SB2024070206
SB2024070724
and 15 more
#VU90927 - Double Free
CVE-2024-26782		 CWE-415 Low
No
No
 - 03.06.2024 SB20240603196
SB2024070852
SB2024070853
and 32 more
#VU89268 - Improper Access Control
CVE-2023-52620		 CWE-284 Low
No
No
 - 08.05.2024 SB2024050861
SB2024051357
SB20240620274
and 42 more
#VU88665 - Improper input validation
CVE-2024-21085		 CWE-20 Low
No
No
 - 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88666 - Improper input validation
CVE-2024-21011		 CWE-20 Low
No
No
 - 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88667 - Improper input validation
CVE-2024-21068		 CWE-20 Low
No
No
 - 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 72 more
#VU88668 - Improper input validation
CVE-2024-21094		 CWE-20 Low
No
No
 - 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU88669 - Improper input validation
CVE-2024-21012		 CWE-20 Low
No
No
 - 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 68 more
#VU88670 - Improper input validation
CVE-2024-21003		 CWE-20 Low
No
No
 - 17.04.2024 SB2024041764
SB2024041765
SB2024061227
and 9 more
#VU88671 - Improper input validation
CVE-2024-21005		 CWE-20 Low
No
No
 - 17.04.2024 SB2024041764
SB2024041765
SB2024050635
and 10 more
#VU88672 - Improper input validation
CVE-2024-21002		 CWE-20 Low
No
No
 - 17.04.2024 SB2024041764
SB2024041765
SB2024061227
and 8 more
#VU88673 - Improper input validation
CVE-2024-21004		 CWE-20 Low
No
No
 - 17.04.2024 SB2024041764
SB2024041765
SB2024061227
and 8 more
#VU88430 - Use After Free
CVE-2024-21409		 CWE-416 Medium
No
No
 - 10.04.2024 SB2024041074
SB20240806201
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795		 CWE-113 Medium
No
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 38 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709		 CWE-113 Medium
No
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 62 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 - 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87749 - Missing Authorization
CVE-2024-1488		 CWE-862 Low
No
No
 - 22.03.2024 SB2024021506
SB2024032281
SB2024041058
and 28 more
#VU87685 - Resource exhaustion
CVE-2024-0450		 CWE-400 Medium
No
No
 - 21.03.2024 SB2024032107
SB2024032110
SB2024040848
and 80 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218		 CWE-200 Low
No
No
 - 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more


Showing elements 681 - 700 out of 3943