Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2015-518: krb5 (medium)
CVEs:CVE-2014-5352CVE-2014-5353CVE-2014-5355CVE-2014-9421CVE-2014-9422
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| krb5 | affected | Amazon | krb5 | — |
ALAS-2015-519: xorg-x11-server (medium)
CVEs:CVE-2015-0255
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| xorg-x11-server | affected | Amazon | xorg-x11-server | — |
ALAS-2015-520: ntp (important)
CVEs:CVE-2015-1798CVE-2015-1799
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ntp | affected | Amazon | ntp | — |
ALAS-2015-527: tomcat8 (medium)
CVEs:CVE-2014-0075CVE-2014-0096CVE-2014-0099CVE-2014-0227
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat8 | affected | Amazon | tomcat8 | — |
ALAS-2015-526: tomcat7 (medium)
CVEs:CVE-2014-0075CVE-2014-0096CVE-2014-0099CVE-2014-0227
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat7 | affected | Amazon | tomcat7 | — |
ALAS-2015-525: tomcat6 (medium)
CVEs:CVE-2014-0227
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat6 | affected | Amazon | tomcat6 | — |
ALAS-2015-523: kernel (medium)
CVEs:CVE-2015-3331CVE-2015-3636
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2015-517: java-1.8.0-openjdk (important)
CVEs:CVE-2005-1080CVE-2015-0460CVE-2015-0469CVE-2015-0470CVE-2015-0477CVE-2015-0478CVE-2015-0480CVE-2015-0488
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Amazon | java-1.8.0-openjdk | — |
ALAS-2015-532: ruby21 (medium)
CVEs:CVE-2015-1855
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ruby21 | affected | Amazon | ruby21 | — |
ALAS-2015-533: ruby22 (medium)
CVEs:CVE-2015-1855
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ruby22 | affected | Amazon | ruby22 | — |
ALAS-2015-529: ruby18 (medium)
CVEs:CVE-2015-1855
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ruby18 | affected | Amazon | ruby18 | — |
ALAS-2015-530: ruby19 (medium)
CVEs:CVE-2015-1855
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ruby19 | affected | Amazon | ruby19 | — |
ALAS-2015-531: ruby20 (medium)
CVEs:CVE-2015-1855
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ruby20 | affected | Amazon | ruby20 | — |
ALAS-2015-522: docker (critical)
CVEs:CVE-2015-3627CVE-2015-3629CVE-2015-3630CVE-2015-3631
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| docker | affected | Amazon | docker | — |
ALAS-2015-524: php (medium)
CVEs:CVE-2015-2305
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php | affected | Amazon | php | — |
ALAS-2015-528: pcre (low)
CVEs:CVE-2014-8964
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| pcre | affected | Amazon | pcre | — |
ALAS-2015-521: python-tornado (low)
CVEs:CVE-2013-2099
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python-tornado | affected | Amazon | python-tornado | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.