ALAS-2014-312
ALAS · AL1Weaponized exploitMedium2014-03-24
ALAS-2014-312: tomcat7 (medium)
CVEs:CVE-2014-0050
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat7 | affected | Amazon | tomcat7 | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2014-312: tomcat7 (medium)
CVEs:CVE-2014-0050
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat7 | affected | Amazon | tomcat7 | — |
ALAS-2014-301: gnutls (important)
CVEs:CVE-2014-0092
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| gnutls | affected | Amazon | gnutls | — |
ALAS-2014-309: httpd24 (medium)
CVEs:CVE-2014-0098
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| httpd24 | affected | Amazon | httpd24 | — |
ALAS-2014-307: libtiff (medium)
CVEs:CVE-2010-2596CVE-2013-1960CVE-2013-1961CVE-2013-4231CVE-2013-4232CVE-2013-4243CVE-2013-4244
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libtiff | affected | Amazon | libtiff | — |
ALAS-2014-318: subversion (medium)
CVEs:CVE-2014-0032
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| subversion | affected | Amazon | subversion | — |
ALAS-2014-316: net-snmp (medium)
CVEs:CVE-2012-6151CVE-2014-2284
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| net-snmp | affected | Amazon | net-snmp | — |
ALAS-2014-308: nginx (important)
CVEs:CVE-2014-0133
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nginx | affected | Amazon | nginx | — |
ALAS-2014-305: postgresql8 (important)
CVEs:CVE-2014-0060CVE-2014-0061CVE-2014-0062CVE-2014-0063CVE-2014-0064CVE-2014-0065CVE-2014-0066
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| postgresql8 | affected | Amazon | postgresql8 | — |
ALAS-2014-306: postgresql9 (important)
CVEs:CVE-2014-0060CVE-2014-0061CVE-2014-0062CVE-2014-0063CVE-2014-0064CVE-2014-0065CVE-2014-0066
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| postgresql9 | affected | Amazon | postgresql9 | — |
ALAS-2014-298: mysql51 (medium)
CVEs:CVE-2013-5908CVE-2014-0001CVE-2014-0386CVE-2014-0393CVE-2014-0401CVE-2014-0402CVE-2014-0412CVE-2014-0437
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mysql51 | affected | Amazon | mysql51 | — |
ALAS-2014-313: php54 (medium)
CVEs:CVE-2014-1943CVE-2014-2270
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php54 | affected | Amazon | php54 | — |
ALAS-2014-314: php55 (important)
CVEs:CVE-2013-7327CVE-2014-1943CVE-2014-2270
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php55 | affected | Amazon | php55 | — |
ALAS-2014-304: file (medium)
CVEs:CVE-2014-1943
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| file | affected | Amazon | file | — |
ALAS-2014-299: lighttpd (medium)
CVEs:CVE-2013-4508CVE-2013-4559CVE-2013-4560
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| lighttpd | affected | Amazon | lighttpd | — |
ALAS-2014-317: kernel (low)
CVEs:CVE-2014-0101
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2014-296: graphviz (medium)
CVEs:CVE-2014-0978CVE-2014-1235CVE-2014-1236
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| graphviz | affected | Amazon | graphviz | — |
ALAS-2014-297: graphviz-php (medium)
CVEs:CVE-2014-0978CVE-2014-1235CVE-2014-1236
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| graphviz-php | affected | Amazon | graphviz-php | — |
ALAS-2014-310: mutt (important)
CVEs:CVE-2014-0467
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mutt | affected | Amazon | mutt | — |
ALAS-2014-303: openswan (medium)
CVEs:CVE-2013-6466
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openswan | affected | Amazon | openswan | — |
ALAS-2014-315: yum (medium)
CVEs:CVE-2014-0022
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| yum | affected | Amazon | yum | — |
ALAS-2014-311: 389-ds-base (important)
CVEs:CVE-2014-0132
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| 389-ds-base | affected | Amazon | 389-ds-base | — |
ALAS-2014-302: numpy (low)
CVEs:CVE-2014-1858CVE-2014-1859
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| numpy | affected | Amazon | numpy | — |
ALAS-2014-300: socat (low)
CVEs:CVE-2014-0019
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| socat | affected | Amazon | socat | — |
ALAS-2014-319: openssh (important)
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssh | affected | Amazon | openssh | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.