Skip to contentAmazon vulnerabilities
Newest
- amazon web services log4j-cve-2021-44228-hotpatch, amazon log4jhotpatch +1 moreLog4j hot patch package privilege escalationCVE-2022-00708.8 High
- amazon web services log4j-cve-2021-44228-hotpatch, amazon log4jhotpatch +1 moreLog4j hot patch package privilege escalationCVE-2021-31008.8 High
- amazon aws client vpnAn issue was discovered in Amazon AWS VPN Client 2.0.0. A TOCTOU race condition exists during the...CVE-2022-251657.0 High
- amazon aws client vpnAn issue was discovered in Amazon AWS VPN Client 2.0.0. It is possible to include a UNC path in...CVE-2022-251665.0 Medium
- amazon awsui\/components-react, aws awsui-documentation +1 moreCross site scripting in @awsui/components-reactCVE-2022-24709Fix available8.8 High
- amazon echo dot firmwareImproper Neutralization of audio output from 3rd and 4th Generation Amazon Echo Dot devices...CVE-2022-258099.8 Critical
- amazon aws software development kit, github.com/aws/aws-sdk-go github.com/aws/aws-sdk-go/service/s3/s3crypto +1 moreExposure of unencrypted plaintext hash in github.com/aws/aws-sdk-goCVE-2022-2582Fix available4.3 Medium
- amazon aws opensearchThe CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file.CVE-2021-448339.8 Critical
- amazon sockeyeCode injection via unsafe YAML loadingCVE-2021-43811Public exploitFix available7.8 High
- amazon workspacesAmazon Amazon WorkSpaces agent is affected by Integer Overflow. IOCTL Handler 0x22001B in the...CVE-2021-436388.8 High
- amazon workspacesAmazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon...CVE-2021-436378.8 High
- amazon web services aws-c-io, amazon web services aws iot device sdk v2 for c++, aws iot device sdk v2 for java +4 more +6 moreMissing SNI validation and inconsistent CA override function behavior within AWS IoT Device SDKs on Apple devicesCVE-2021-40831Fix available6.3 Medium
- amazon web services aws-c-io, amazon web services aws iot device sdk v2 for c++, aws iot device sdk v2 for java +4 more +6 moreInconsistent CA override function behavior within AWS IoT Device SDKs on Unix systemsCVE-2021-40830Fix available6.3 Medium
- amazon web services aws iot device sdk v2 for c++, aws iot device sdk v2 for java, aws iot device sdk v2 for node.js +3 more +5 moreTLS hostname validation issues within AWS IoT Device SDKs on macOSCVE-2021-40829Fix available6.3 Medium
- amazon web services aws iot device sdk v2 for c++, aws iot device sdk v2 for java, aws iot device sdk v2 for node.js +4 more +6 moreTLS hostname validation issues within AWS IoT Device SDKs on WindowsCVE-2021-40828Fix available6.3 Medium
- amazon freertosAmazon FreeRTOS 10.2.0 through 10.4.5 on the ARMv7-M and ARMv8-M MPU platforms does not prevent...CVE-2021-439977.8 High
- amazon toughImproper sanitization of delegated role names in toughCVE-2021-41150Fix available8.2 High
- amazon toughImproper sanitization of target names in toughCVE-2021-41149Fix available8.2 High
- amazon aws workspacesIn the Amazon AWS WorkSpaces client before 3.1.9 on Windows, argument injection in the workspaces...CVE-2021-381128.8 High
- amazon kindle firmwareAmazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges,...CVE-2021-303558.6 High
- amazon kindle firmwareAmazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that...CVE-2021-303548.6 High
- amazon cloudfrontAmazon AWS CloudFront TLSv1.2_2019 allows TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and...CVE-2020-363639.8 Critical
- amazon echo dot firmwareAmazon Echo Dot devices through 2021-07-02 sometimes allow attackers, who have physical access to...CVE-2021-374364.2 Medium
- amazon aws encryption sdkAWS Encryption SDK for Java Improper Verification of Cryptographic SignatureCVE-2024-23680Fix available5.3 Medium
- amazon open distroAn SSRF issue in Open Distro for Elasticsearch (ODFE) before 1.13.1.0 allows an existing...CVE-2021-318287.1 High
- amazon freertosThe kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during...CVE-2021-320209.8 Critical
- amazon freertosThe kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in stream_buffer...CVE-2021-315729.8 Critical
- amazon freertosThe kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for...CVE-2021-315719.8 Critical
- amazon aws sdk for javascipt, aws shared configuration file loader +1 morePrototype PollutionCVE-2020-28472Fix available7.3 High
- amazon aws encryption sdk, aws sdk +1 moreRobustness weakness in AWS KMS and Encryption SDKsCVE-2020-8897Fix available4.8 Medium
- amazon firecrackerIn Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can...CVE-2020-271747.5 High
- amazon aws s3 crypto sdk, google llc aws s3 crypto sdk for golang +1 moreIn-band key negotiation issue in AWS S3 Crypto SDK for GoLangCVE-2020-8912Fix available2.5 Low
- amazon aws s3 crypto sdk, google llc aws s3 crypto sdk for golang +1 moreCBC padding oracle in AWS S3 Crypto SDK for GoLangCVE-2020-8911Fix available5.6 Medium
- amazon firecrackerIn Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under...CVE-2020-168435.9 Medium
- amazon toughImproper verification of signature threshold in toughCVE-2020-15093Fix available8.6 High
- amazon aws javascript s3 explorerexplorer.js in Amazon AWS JavaScript S3 Explorer (aka aws-js-s3-explorer) v2 alpha before 2019-08...CVE-2019-146526.1 Medium
- amazon aws lambdaOS command injection in aws-lambdaCVE-2019-10777Fix available9.8 Critical
- amazon blink xt2 sync module firmwareBlink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary...CVE-2019-39849.8 Critical
- amazon blink xt2 sync module firmwareBlink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code...CVE-2019-39836.8 Medium
- amazon blink xt2 sync module firmwareBlink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary...CVE-2019-39858.8 High
- amazon blink xt2 sync module firmwareBlink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary...CVE-2019-39868.8 High
- amazon blink xt2 sync module firmwareBlink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary...CVE-2019-39878.8 High
- amazon blink xt2 sync module firmwareBlink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary...CVE-2019-39888.8 High
- amazon blink xt2 sync module firmwareBlink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary...CVE-2019-39899.8 Critical
- amazon firecrackerFirecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result...CVE-2019-189609.8 Critical
- amazon audibleThe Audible application through 2.34.0 for Android has Missing SSL Certificate Validation,...CVE-2019-115545.9 Medium
- amazon freertos\+fatReal Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined...CVE-2019-181787.5 High
- amazon web services freertosAmazon FreeRTOS up to and including v1.4.8 for AWS lacks length checking in...CVE-2019-131207.5 High
- amazon aws software development kitAmazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS...CVE-2018-199817.2 High
- amazon ring video doorbell firmwareAmazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio...CVE-2019-94839.1 Critical
- Show moreLoading…