Browse CVEs

HIGH 8.8 CVE-2019-3985 Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input… Blink Xt2 Sync Module Firmware 2.13.11+ Fix from $1,9502019-12-11 HIGH 8.8 CVE-2019-3986 Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input… Blink Xt2 Sync Module Firmware 2.13.11+ Fix from $1,9502019-12-11 HIGH 8.8 CVE-2019-3987 Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input… Blink Xt2 Sync Module Firmware 2.13.11+ Fix from $1,9502019-12-11 HIGH 8.8 CVE-2019-3988 Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input… Blink Xt2 Sync Module Firmware 2.13.11+ Fix from $1,9502019-12-11 MEDIUM 6.8 CVE-2019-3983 Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART… Blink Xt2 Sync Module Firmware 2.13.11+ Fix from $1,6002019-12-11 CRITICAL 9.8 CVE-2019-18960 Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes. Firecracker Mitigation only Fix from $2,3002019-12-11 MEDIUM 5.9 CVE-2019-11554 The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial o… Audible after 2.34.0 Fix from $1,6002019-12-06 HIGH 7.5 CVE-2019-18178 Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined in ff_file.c. The file handler pxFile is freed by f… Freertos\+fat No fix yet Fix from $1,9502019-11-04 HIGH 7.5 CVE-2019-13120 Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory … Amazon Web Services Freertos after 1.4.8 Fix from $1,9502019-10-07 HIGH 7.2 CVE-2018-19981 Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity… Aws Software Development Kit after 2.8.5 Fix from $1,9502019-04-04 CRITICAL 9.1 CVE-2019-9483 Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not… Ring Video Doorbell Firmware 3.4.7+ Fix from $2,3002019-03-01 HIGH 7.4 CVE-2019-7399 Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages. Fire Os 5.3.6.4+ Fix from $1,9502019-02-17 HIGH 8.1 CVE-2018-16601 An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect… Amazon Web Services Freertos after 10.0.1 Fix from $1,9502018-12-06 MEDIUM 5.9 CVE-2018-16602 An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect… Amazon Web Services Freertos after 10.0.1 Fix from $1,6002018-12-06 MEDIUM 5.9 CVE-2018-16603 An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect… Amazon Web Services Freertos after 10.0.1 Fix from $1,6002018-12-06 HIGH 8.1 CVE-2018-16522 Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS_SetSockOpt. Amazon Web Services Freertos after 1.3.1 Fix from $1,9502018-12-06 HIGH 8.1 CVE-2018-16525 Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP componen… Amazon Web Services Freertos after 10.0.1 Fix from $1,9502018-12-06 HIGH 8.1 CVE-2018-16526 Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP componen… Amazon Web Services Freertos after 10.0.1 Fix from $1,9502018-12-06 HIGH 8.1 CVE-2018-16528 Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruption in pr… Amazon Web Services Freertos after 1.3.1 Fix from $1,9502018-12-06 HIGH 7.4 CVE-2018-16523 Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP componen… Amazon Web Services Freertos after 10.0.1 Fix from $1,9502018-12-06 MEDIUM 5.9 CVE-2018-16524 Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP componen… Amazon Web Services Freertos after 10.0.1 Fix from $1,6002018-12-06 MEDIUM 5.9 CVE-2018-16527 Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP componen… Amazon Web Services Freertos after 10.0.1 Fix from $1,6002018-12-06 MEDIUM 5.9 CVE-2018-16598 An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect… Amazon Web Services Freertos after 10.0.1 Fix from $1,6002018-12-06 MEDIUM 5.9 CVE-2018-16599 An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect… Amazon Web Services Freertos after 10.0.1 Fix from $1,6002018-12-06 MEDIUM 5.9 CVE-2018-16600 An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect… Amazon Web Services Freertos after 10.0.1 Fix from $1,6002018-12-06 MEDIUM 6.1 CVE-2018-19186 The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter. Payfort Php Sdk after 2018-04-26 Fix from $1,6002018-11-14 MEDIUM 6.1 CVE-2018-19187 The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a su… Payfort Php Sdk after 2018-04-26 Fix from $1,6002018-11-14 MEDIUM 6.1 CVE-2018-19188 The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter. Payfort Php Sdk after 2018-04-26 Fix from $1,6002018-11-14 MEDIUM 6.1 CVE-2018-19189 The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in an e… Payfort Php Sdk after 2018-04-26 Fix from $1,6002018-11-14 MEDIUM 6.1 CVE-2018-19190 The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php error_msg parameter. Payfort Php Sdk after 2018-04-26 Fix from $1,6002018-11-14