Known vulnerabilities in Amazon Linux AMI - page 93

Vendor: Amazon Web Services
Software: Amazon Linux AMI
Software CPE: cpe:2.3:o:amazon_web_services:amazon_linux_ami:*:*:*:*:*:*:*:*
Website: https://aws.amazon.com/
Total vulnerabilities: 3943
Public exploits: 290
Known exploited (KEV): 53
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Amazon Linux AMI Amazon Linux AMI is affected by 3943 known vulnerabilities: 26 critical, 592 high, 1559 medium, 1766 low Critical High Medium Low

Vulnerabilities (3943)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65004 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-28391		 CWE-78 High
No
No
 - 07.07.2022 SB2022070727
SB2022070729
SB2023051039
and 3 more
#VU64156 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-1729		 CWE-362 Low
No
No
 - 10.06.2022 SB2022061213
SB2022061417
SB2022061630
and 79 more
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU63631 - Incorrect Default Permissions
CVE-2022-30594		 CWE-276 Low
No
No
 - 25.05.2022 SB2022052605
SB2022052606
SB2022060109
and 57 more
#VU63496 - Improper Update of Reference Count
CVE-2022-29581		 CWE-911 Low
No
No
 - 20.05.2022 SB2022052020
SB2022052604
SB2022052605
and 56 more
#VU63427 - Missing release of memory after effective lifetime
CVE-2022-0854		 CWE-401 Low
No
No
 - 19.05.2022 SB2022061213
SB2022061417
SB2022042152
and 33 more
#VU63388 - Exposure of sensitive information to an unauthorized actor
CVE-2022-1353		 CWE-200 Low
No
No
 - 18.05.2022 SB2022060826
SB2022060828
SB2022061213
and 58 more
#VU63386 - Use After Free
CVE-2022-1011		 CWE-416 Low
Available
No
 - 18.05.2022 SB2022060828
SB2022061213
SB2022061630
and 53 more
#VU63164 - Double Free
CVE-2022-28390		 CWE-415 Low
No
No
 - 13.05.2022 SB2022051312
SB2022051712
SB2022051833
and 61 more
#VU63162 - Double Free
CVE-2022-28389		 CWE-415 Low
No
No
 - 13.05.2022 SB2022051312
SB2022051712
SB2022060826
and 42 more
#VU63158 - NULL Pointer Dereference
CVE-2022-1516		 CWE-476 Low
No
No
 - 13.05.2022 SB2022051313
SB2022051712
SB2022060826
and 31 more
#VU62258 - Untrusted Search Path
CVE-2022-24765		 CWE-426 Low
No
No
 - 12.04.2022 SB2022041262
SB2022041264
SB2022041265
and 44 more
#VU62002 - Improper input validation
CVE-2022-1271		 CWE-20 High
No
No
 - 08.04.2022 SB2022040803
SB2022040804
SB2022040822
and 134 more
#VU61681 - Server-Side Request Forgery (SSRF)
CVE-2021-4189		 CWE-918 Medium
No
No
 - 29.03.2022 SB2022032904
SB2022032905
SB2022032907
and 42 more
#VU61017 - Memory corruption
CVE-2022-21716		 CWE-119 Medium
No
No
 - 04.03.2022 SB2022030407
SB2022032438
SB2022032448
and 17 more
#VU59952 - Heap-based Buffer Overflow
CVE-2021-45417		 CWE-122 Low
No
No
 - 24.01.2022 SB2022012407
SB2022012436
SB2022020713
and 22 more
#VU59642 - Resource exhaustion
CVE-2021-45960		 CWE-400 Medium
No
No
 - 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU59089 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-3737		 CWE-835 Low
No
No
 - 22.12.2021 SB2021122214
SB2022050235
SB2022051138
and 58 more
#VU58295 - Resource Management Errors
CVE-2021-3733		 CWE-399 Low
No
No
 - 23.11.2021 SB2021112309
SB2021122214
SB2022050235
and 41 more
#VU50621 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-27619		 CWE-94 Medium
No
No
 - 11.02.2021 SB2020112330
SB2021032307
SB2021032607
and 24 more


Showing elements 1841 - 1860 out of 3943