Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2019-1266: java-1.8.0-openjdk (important)
CVEs:CVE-2019-2602CVE-2019-2684CVE-2019-2698
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Amazon | java-1.8.0-openjdk | — |
ALAS-2019-1253: kernel (medium)
CVEs:CVE-2019-1125
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2019-1271: poppler (medium)
CVEs:CVE-2018-16646CVE-2018-18897CVE-2018-19058CVE-2018-19059CVE-2018-19060CVE-2018-19149CVE-2018-20481CVE-2018-20650CVE-2018-20662CVE-2019-7310CVE-2019-9200CVE-2019-9631
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| poppler | affected | Amazon | poppler | — |
ALAS-2019-1270: golang (important)
CVEs:CVE-2019-14809CVE-2019-9512CVE-2019-9514
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Amazon | golang | — |
ALAS-2019-1265: lighttpd (medium)
CVEs:CVE-2018-19052CVE-2018-25103
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| lighttpd | affected | Amazon | lighttpd | — |
ALAS-2019-1258: python27 (important)
CVEs:CVE-2019-10160CVE-2019-9948
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python27 | affected | Amazon | python27 | — |
ALAS-2019-1254: libssh2 (important)
CVEs:CVE-2019-3855CVE-2019-3856CVE-2019-3857CVE-2019-3863
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libssh2 | affected | Amazon | libssh2 | — |
ALAS-2019-1259: python34, python35, python36 (important)
CVEs:CVE-2019-10160
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python34, python35, python36 | affected | Amazon | python34, python35, python36 | — |
ALAS-2019-1255: ruby20, ruby21, ruby24 (important)
CVEs:CVE-2019-8320CVE-2019-8321CVE-2019-8322CVE-2019-8323CVE-2019-8324CVE-2019-8325
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ruby20, ruby21, ruby24 | affected | Amazon | ruby20, ruby21, ruby24 | — |
ALAS-2019-1256: glib2 (medium)
CVEs:CVE-2019-12450
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| glib2 | affected | Amazon | glib2 | — |
ALAS-2019-1260: qemu-kvm (important)
CVEs:CVE-2018-12126CVE-2018-12127CVE-2018-12130CVE-2019-11091
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| qemu-kvm | affected | Amazon | qemu-kvm | — |
ALAS-2019-1261: 389-ds-base (medium)
CVEs:CVE-2019-3883
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| 389-ds-base | affected | Amazon | 389-ds-base | — |
ALAS-2019-1269: java-1.8.0-openjdk (medium)
CVEs:CVE-2019-2745CVE-2019-2762CVE-2019-2769CVE-2019-2786CVE-2019-2816CVE-2019-2842
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Amazon | java-1.8.0-openjdk | — |
ALAS-2019-1268: java-1.7.0-openjdk (medium)
CVEs:CVE-2019-2745CVE-2019-2762CVE-2019-2769CVE-2019-2786CVE-2019-2816CVE-2019-2842
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.7.0-openjdk | affected | Amazon | java-1.7.0-openjdk | — |
ALAS-2019-1257: GraphicsMagick (low)
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| GraphicsMagick | affected | Amazon | GraphicsMagick | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.