Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2020-1422: ruby24 (important)
CVEs:CVE-2012-6708CVE-2015-9251CVE-2019-15845CVE-2019-16201CVE-2019-16254CVE-2019-16255CVE-2020-10663
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ruby24 | affected | Amazon | ruby24 | — |
ALAS-2020-1425: php72, php73 (low)
CVEs:CVE-2020-7068
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php72, php73 | affected | Amazon | php72, php73 | — |
ALAS-2020-1421: python-rsa (medium)
CVEs:CVE-2020-13757
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python-rsa | affected | Amazon | python-rsa | — |
ALAS-2020-1416: ruby20 (medium)
CVEs:CVE-2018-16396CVE-2020-10663
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ruby20 | affected | Amazon | ruby20 | — |
ALAS-2020-1423: rubygem-json (medium)
CVEs:CVE-2020-10663
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| rubygem-json | affected | Amazon | rubygem-json | — |
ALAS-2020-1426: ruby19, ruby21 (medium)
CVEs:CVE-2020-10663
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ruby19, ruby21 | affected | Amazon | ruby19, ruby21 | — |
ALAS-2020-1415: libxml2 (important)
CVEs:CVE-2015-8035CVE-2016-5131CVE-2017-15412CVE-2017-18258CVE-2018-14404CVE-2018-14567
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libxml2 | affected | Amazon | libxml2 | — |
ALAS-2020-1428: python36 (medium)
CVEs:CVE-2019-18348CVE-2019-20907
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python36 | affected | Amazon | python36 | — |
ALAS-2020-1429: python34, python35 (medium)
CVEs:CVE-2019-18348CVE-2019-20907
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python34, python35 | affected | Amazon | python34, python35 | — |
ALAS-2020-1427: python27 (medium)
CVEs:CVE-2019-20907
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python27 | affected | Amazon | python27 | — |
ALAS-2020-1424: samba (medium)
CVEs:CVE-2019-10197CVE-2019-10218
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| samba | affected | Amazon | samba | — |
ALAS-2020-1417: golang (medium)
CVEs:CVE-2020-15586
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Amazon | golang | — |
ALAS-2020-1420: python-httplib2 (medium)
CVEs:CVE-2020-11078
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python-httplib2 | affected | Amazon | python-httplib2 | — |
ALAS-2020-1414: keepalived (medium)
CVEs:CVE-2018-19044
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| keepalived | affected | Amazon | keepalived | — |
ALAS-2020-1419: lynis (medium)
CVEs:CVE-2019-13033CVE-2020-13882
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| lynis | affected | Amazon | lynis | — |
ALAS-2020-1418: httpd24 (low)
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| httpd24 | affected | Amazon | httpd24 | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.