Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2016-661: openssl (important)
CVEs:CVE-2015-3197CVE-2015-7575CVE-2016-0702CVE-2016-0705CVE-2016-0797CVE-2016-0799CVE-2016-0800CVE-2016-2842
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssl | affected | Amazon | openssl | — |
ALAS-2016-670: php54 (low)
CVEs:CVE-2015-6834CVE-2015-6835CVE-2015-6836CVE-2015-6837CVE-2015-6838
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php54 | affected | Amazon | php54 | — |
ALAS-2016-668: openssh (medium)
CVEs:CVE-2016-3115
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssh | affected | Amazon | openssh | — |
ALAS-2016-671: nmap (low)
CVEs:CVE-2013-4885
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nmap | affected | Amazon | nmap | — |
ALAS-2016-676: mod_dav_svn, subversion (important)
CVEs:CVE-2015-3184CVE-2015-3187CVE-2015-5259CVE-2015-5343
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mod_dav_svn, subversion | affected | Amazon | mod_dav_svn, subversion | — |
ALAS-2016-656: tomcat6 (medium)
CVEs:CVE-2014-0230CVE-2014-7810
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat6 | affected | Amazon | tomcat6 | — |
ALAS-2016-680: tomcat7 (medium)
CVEs:CVE-2015-5345CVE-2015-5351CVE-2016-0706CVE-2016-0714CVE-2016-0763
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat7 | affected | Amazon | tomcat7 | — |
ALAS-2016-681: tomcat6 (medium)
CVEs:CVE-2015-5174CVE-2015-5345CVE-2016-0706CVE-2016-0714
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat6 | affected | Amazon | tomcat6 | — |
ALAS-2016-658: tomcat8 (medium)
CVEs:CVE-2014-7810CVE-2015-5174CVE-2015-5345
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat8 | affected | Amazon | tomcat8 | — |
ALAS-2016-672: git (important)
CVEs:CVE-2016-2315CVE-2016-2324
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| git | affected | Amazon | git | — |
ALAS-2016-657: tomcat7 (medium)
CVEs:CVE-2014-7810CVE-2015-5174CVE-2015-5346
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat7 | affected | Amazon | tomcat7 | — |
ALAS-2016-675: openssh (medium)
CVEs:CVE-2016-1908
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssh | affected | Amazon | openssh | — |
ALAS-2016-679: tomcat8 (medium)
CVEs:CVE-2015-5346CVE-2015-5351CVE-2016-0706CVE-2016-0714CVE-2016-0763
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat8 | affected | Amazon | tomcat8 | — |
ALAS-2016-662: postgresql94, postgresql93, postgresql92 (important)
CVEs:CVE-2016-0773
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| postgresql94, postgresql93, postgresql92 | affected | Amazon | postgresql94, postgresql93, postgresql92 | — |
ALAS-2016-659: rpcbind (medium)
CVEs:CVE-2015-7236
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| rpcbind | affected | Amazon | rpcbind | — |
ALAS-2016-667: nss-util (critical)
CVEs:CVE-2016-1950
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nss-util | affected | Amazon | nss-util | — |
ALAS-2016-665: bind (important)
CVEs:CVE-2016-1285CVE-2016-1286
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| bind | affected | Amazon | bind | — |
ALAS-2016-677: java-1.8.0-openjdk, java-1.7.0-openjdk (critical)
CVEs:CVE-2016-0636
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk, java-1.7.0-openjdk | affected | Amazon | java-1.8.0-openjdk, java-1.7.0-openjdk | — |
ALAS-2016-664: 389-ds-base (important)
CVEs:CVE-2016-0741
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| 389-ds-base | affected | Amazon | 389-ds-base | — |
ALAS-2016-673: cacti (medium)
CVEs:CVE-2013-5588CVE-2013-5589CVE-2014-5025CVE-2014-5026CVE-2015-2665CVE-2015-4342CVE-2015-4454CVE-2015-4634CVE-2015-8377CVE-2015-8604
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| cacti | affected | Amazon | cacti | — |
ALAS-2016-663: privoxy (medium)
CVEs:CVE-2016-1982CVE-2016-1983
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| privoxy | affected | Amazon | privoxy | — |
ALAS-2016-678: GraphicsMagick (medium)
CVEs:CVE-2015-8808
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| GraphicsMagick | affected | Amazon | GraphicsMagick | — |
ALAS-2016-669: kernel (medium)
CVEs:CVE-2016-2383CVE-2016-2550CVE-2016-2847CVE-2016-3157
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2016-674: samba (medium)
CVEs:CVE-2015-7560
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| samba | affected | Amazon | samba | — |
ALAS-2016-660: glibc (low)
CVEs:CVE-2015-5229
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| glibc | affected | Amazon | glibc | — |
ALAS-2016-666: sos (medium)
CVEs:CVE-2015-7529
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| sos | affected | Amazon | sos | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.