Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2023-1711: httpd24 (important)
CVEs:CVE-2006-20001CVE-2022-36760CVE-2022-37436CVE-2023-25690CVE-2023-27522
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| httpd24 | affected | Amazon | httpd24 | — |
ALAS-2023-1696: ImageMagick (medium)
CVEs:CVE-2021-20224CVE-2021-3574CVE-2021-4219CVE-2022-28463CVE-2022-32545CVE-2022-32546CVE-2022-32547CVE-2022-44267CVE-2022-44268
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ImageMagick | affected | Amazon | ImageMagick | — |
ALAS-2023-1695: batik (important)
CVEs:CVE-2020-11987CVE-2022-38398CVE-2022-38648CVE-2022-40146CVE-2022-41704CVE-2022-42890
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| batik | affected | Amazon | batik | — |
ALAS-2023-1701: kernel (important)
CVEs:CVE-2023-0458CVE-2023-1281CVE-2023-1829CVE-2023-1998CVE-2023-2162CVE-2023-26545CVE-2023-2985CVE-2023-45862CVE-2023-52974CVE-2023-7192
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2023-1706: kernel (important)
CVEs:CVE-2022-3643CVE-2022-42328CVE-2022-42329CVE-2022-48956CVE-2022-48988CVE-2022-48991CVE-2022-49015CVE-2022-49753CVE-2023-0045CVE-2023-0394CVE-2023-0459CVE-2023-0461CVE-2023-1073
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2023-1697: java-1.8.0-openjdk (medium)
CVEs:CVE-2022-21624CVE-2022-21626CVE-2023-21830CVE-2023-21843
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Amazon | java-1.8.0-openjdk | — |
ALAS-2023-1704: tar (important)
CVEs:CVE-2022-48303
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tar | affected | Amazon | tar | — |
ALAS-2023-1700: git (medium)
CVEs:CVE-2023-22490CVE-2023-23946
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| git | affected | Amazon | git | — |
ALAS-2023-1707: kernel (important)
CVEs:CVE-2022-3524CVE-2023-26607
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2023-1698: cifs-utils (important)
CVEs:CVE-2022-27239
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| cifs-utils | affected | Amazon | cifs-utils | — |
ALAS-2023-1703: vim (important)
CVEs:CVE-2023-0288CVE-2023-0433CVE-2023-0512CVE-2023-1127
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| vim | affected | Amazon | vim | — |
ALAS-2023-1709: python-lxml (important)
CVEs:CVE-2020-27783CVE-2021-43818
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python-lxml | affected | Amazon | python-lxml | — |
ALAS-2023-1705: lighttpd (important)
CVEs:CVE-2022-37797
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| lighttpd | affected | Amazon | lighttpd | — |
ALAS-2023-1699: freeradius (medium)
CVEs:CVE-2022-41860
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| freeradius | affected | Amazon | freeradius | — |
ALAS-2023-1702: xorg-x11-server (important)
CVEs:CVE-2023-0494
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| xorg-x11-server | affected | Amazon | xorg-x11-server | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.