Filtered by vendor Blynk
Subscriptions
Total
5 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2022-29496 | 1 Blynk | 1 Blynk-library | 2024-11-21 | 9.8 Critical |
A stack-based buffer overflow vulnerability exists in the BlynkConsole.h runCommand functionality of Blynk -Library v1.0.1. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability. | ||||
CVE-2019-5065 | 1 Blynk | 1 Blynk-library | 2024-11-21 | 5.3 Medium |
An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability. | ||||
CVE-2018-17785 | 1 Blynk | 1 Blynk-server | 2024-11-21 | N/A |
In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file. | ||||
CVE-2014-7019 | 1 Blynk | 1 Clarks Inn | 2024-11-21 | N/A |
The Clarks Inn (aka com.ClarksInn) application 3.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | ||||
CVE-2014-6969 | 1 Blynk | 1 Deltin Suites | 2024-11-21 | N/A |
The Deltin Suites (aka com.DeltinSuites) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. |
Page 1 of 1.