Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 2 are already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2013-167: java-1.6.0-openjdk (important)
CVEs:CVE-2013-0809CVE-2013-1493
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.6.0-openjdk | affected | Amazon | java-1.6.0-openjdk | — |
ALAS-2013-168: java-1.7.0-openjdk (important)
CVEs:CVE-2013-0809CVE-2013-1493
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.7.0-openjdk | affected | Amazon | java-1.7.0-openjdk | — |
ALAS-2013-171: openssl (medium)
CVEs:CVE-2012-4929CVE-2013-0166CVE-2013-0169
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssl | affected | Amazon | openssl | — |
ALAS-2013-163: java-1.6.0-openjdk (important)
CVEs:CVE-2013-0169CVE-2013-1486
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.6.0-openjdk | affected | Amazon | java-1.6.0-openjdk | — |
ALAS-2013-162: java-1.7.0-openjdk (important)
CVEs:CVE-2013-0169CVE-2013-1485CVE-2013-1486
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.7.0-openjdk | affected | Amazon | java-1.7.0-openjdk | — |
ALAS-2013-166: kernel (medium)
CVEs:CVE-2012-4398CVE-2012-4461CVE-2012-4530CVE-2013-0871
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2013-170: cups (medium)
CVEs:CVE-2012-5519
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| cups | affected | Amazon | cups | — |
ALAS-2013-175: httpd24 (medium)
CVEs:CVE-2012-3499CVE-2012-4558
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| httpd24 | affected | Amazon | httpd24 | — |
ALAS-2013-174: httpd (medium)
CVEs:CVE-2012-3499CVE-2012-4558
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| httpd | affected | Amazon | httpd | — |
ALAS-2013-173: ruby (medium)
CVEs:CVE-2011-1005CVE-2012-4481CVE-2013-1821
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ruby | affected | Amazon | ruby | — |
ALAS-2013-157: dhcp (low)
CVEs:CVE-2012-3955
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| dhcp | affected | Amazon | dhcp | — |
ALAS-2013-158: bind (medium)
CVEs:CVE-2012-5689
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| bind | affected | Amazon | bind | — |
ALAS-2013-169: jakarta-commons-httpclient (medium)
CVEs:CVE-2012-5783
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| jakarta-commons-httpclient | affected | Amazon | jakarta-commons-httpclient | — |
ALAS-2013-172: gnutls (medium)
CVEs:CVE-2013-1619
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| gnutls | affected | Amazon | gnutls | — |
ALAS-2013-164: axis (medium)
CVEs:CVE-2012-5784
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| axis | affected | Amazon | axis | — |
ALAS-2013-161: dnsmasq (medium)
CVEs:CVE-2012-3411
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| dnsmasq | affected | Amazon | dnsmasq | — |
ALAS-2013-160: pam (medium)
CVEs:CVE-2011-3148CVE-2011-3149
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| pam | affected | Amazon | pam | — |
ALAS-2013-165: openssh (medium)
CVEs:CVE-2012-5536
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssh | affected | Amazon | openssh | — |
ALAS-2013-159: gdb (medium)
CVEs:CVE-2011-4355
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| gdb | affected | Amazon | gdb | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.