Known vulnerabilities in Amazon Linux AMI - page 9

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79963 - Out-of-bounds read
CVE-2023-4156		 CWE-125 Low
No
No
 - 24.08.2023 -
#VU79803 - Memory corruption
CVE-2023-39976		 CWE-119 High
No
No
 - 21.08.2023 -
#VU79767 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40225		 CWE-444 Medium
No
No
 - 21.08.2023 -
#VU79335 - Permissions, Privileges, and Access Controls
CVE-2023-32559		 CWE-264 Medium
No
No
 - 10.08.2023 -
#VU79334 - Permissions, Privileges, and Access Controls
CVE-2023-32006		 CWE-264 Medium
No
No
 - 10.08.2023 -
#VU79332 - Permissions, Privileges, and Access Controls
CVE-2023-32002		 CWE-264 Medium
No
No
 - 10.08.2023 -
#VU78682 - Use After Free
CVE-2023-35942		 CWE-416 Medium
No
No
 - 26.07.2023 -
#VU78681 - Use After Free
CVE-2023-35943		 CWE-416 Medium
No
No
 - 26.07.2023 -
#VU78679 - Improper input validation
CVE-2023-35944		 CWE-20 High
No
No
 - 26.07.2023 -
#VU78576 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34968		 CWE-200 Low
No
No
 - 24.07.2023 -
#VU78575 - Type confusion
CVE-2023-34967		 CWE-843 Medium
No
No
 - 24.07.2023 -
#VU78574 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-34966		 CWE-835 Medium
No
No
 - 24.07.2023 -
#VU78573 - Security Features
CVE-2023-3347		 CWE-254 Medium
No
No
 - 24.07.2023 -
#VU78265 - Improper Authentication
CVE-2023-2975		 CWE-287 Low
No
No
 - 15.07.2023 -
#VU78213 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-33170		 CWE-362 High
No
No
 - 12.07.2023 -
#VU77112 - Use of Insufficiently Random Values
CVE-2023-3247		 CWE-330 Medium
No
No
 - 09.06.2023 -
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 - 08.06.2023 -
#VU68819 - Out-of-bounds write
CVE-2022-3597		 CWE-787 High
No
No
 - 28.10.2022 -
#VU68817 - Out-of-bounds write
CVE-2022-3627		 CWE-787 High
No
No
 - 28.10.2022 -
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 - 25.08.2022 -


Showing elements 161 - 180 out of 3943