Filtered by vendor Blynk Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-29496 1 Blynk 1 Blynk-library 2024-09-16 9.8 Critical
A stack-based buffer overflow vulnerability exists in the BlynkConsole.h runCommand functionality of Blynk -Library v1.0.1. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.
CVE-2018-17785 1 Blynk 1 Blynk-server 2024-09-16 N/A
In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file.
CVE-2014-7019 1 Blynk 1 Clarks Inn 2024-08-06 N/A
The Clarks Inn (aka com.ClarksInn) application 3.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6969 1 Blynk 1 Deltin Suites 2024-08-06 N/A
The Deltin Suites (aka com.DeltinSuites) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2019-5065 1 Blynk 1 Blynk-library 2024-08-04 5.3 Medium
An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability.