← Back

Amazon

amazon

198 CVEs • 107 products

Products (107)

Click to collapse
Toggle
Freertos
freertos
21 CVEs
Amazon Web Services Freertos
amazon_web_services_freertos
14 CVEs
Fire Os
fire_os
13 CVEs
Opensearch
opensearch
11 CVEs
Tough
tough
10 CVEs
Freertos Plus Tcp
freertos-plus-tcp
9 CVEs
Blink Xt2 Sync Module Firmware
blink_xt2_sync_module_firmware
7 CVEs
Aws Software Development Kit
aws_software_development_kit
6 CVEs
Athena Odbc
athena_odbc
6 CVEs
Payfort Php Sdk
payfort-php-sdk
5 CVEs
Firecracker
firecracker
5 CVEs
Data.all
data.all
5 CVEs
Amazon Web Services Internet Of Things Device Software Development Kit V2
amazon_web_services_internet_of_things_device_software_development_kit_v2
4 CVEs
Aws Cloud Development Kit
aws_cloud_development_kit
4 CVEs
Echo Dot Firmware
echo_dot_firmware
3 CVEs
Amazon Web Services Aws C Io
amazon_web_services_aws-c-io
3 CVEs
Opensearch Data Prepper
opensearch_data_prepper
3 CVEs
Aws Lc Sys
aws-lc-sys
3 CVEs
Aws Libcrypto
aws_libcrypto
3 CVEs
Research And Engineering Studio
research_and_engineering_studio
3 CVEs
Kiro Ide
kiro_ide
3 CVEs
Tuftool
tuftool
3 CVEs
Kindle Touch
kindle_touch
2 CVEs
Kindle For Pc
kindle_for_pc
2 CVEs
Audible
audible
2 CVEs
Aws S3 Crypto Sdk
aws_s3_crypto_sdk
2 CVEs
Aws Encryption Sdk
aws_encryption_sdk
2 CVEs
Kindle Firmware
kindle_firmware
2 CVEs
Workspaces
workspaces
2 CVEs
Aws Client Vpn
aws_client_vpn
2 CVEs
Log4jhotpatch
log4jhotpatch
2 CVEs
Amazon Linux
amazon_linux
2 CVEs
Amazon Web Services Redshift Java Database Connectivity Driver
amazon_web_services_redshift_java_database_connectivity_driver
2 CVEs
Opensearch Security
opensearch_security
2 CVEs
Awslabs Sandbox Accounts For Events
awslabs_sandbox_accounts_for_events
2 CVEs
Kiro Cli
kiro_cli
2 CVEs
Merchant Sdk
merchant_sdk
1 CVE
Elastic Load Balancing
elastic_load_balancing
1 CVE
Flexible Payments Service
flexible_payments_service
1 CVE
Ec2 Api Tools Java Library
ec2_api_tools_java_library
1 CVE
Kindle
kindle
1 CVE
Amazon Web Services Cloudformation Bootstrap
amazon_web_services_cloudformation_bootstrap
1 CVE
Amazon Key Firmware
amazon_key_firmware
1 CVE
Amazon Music
amazon_music
1 CVE
Echo Show Firmware
echo_show_firmware
1 CVE
Echo Plus Firmware
echo_plus_firmware
1 CVE
Echo Spot Firmware
echo_spot_firmware
1 CVE
Echo Firmware
echo_firmware
1 CVE
Ring Video Doorbell Firmware
ring_video_doorbell_firmware
1 CVE
Freertos+fat
freertos+fat
1 CVE
Aws Lambda
aws_lambda
1 CVE
Aws Javascript S3 Explorer
aws_javascript_s3_explorer
1 CVE
Aws Sdk For Javascipt
aws_sdk_for_javascipt
1 CVE
Aws Shared Configuration File Loader
aws_shared_configuration_file_loader
1 CVE
Open Distro
open_distro
1 CVE
Amazon Cloudfront
amazon_cloudfront
1 CVE
Aws Workspaces
aws_workspaces
1 CVE
Sockeye
sockeye
1 CVE
Aws Opensearch
aws_opensearch
1 CVE
Awsui/components React
awsui/components-react
1 CVE
Amazon Ssm Agent
amazon_ssm_agent
1 CVE
Hotpatch
hotpatch
1 CVE
Aws Sdk Java
aws-sdk-java
1 CVE
Fhir Works On Aws Authz Smart
fhir-works-on-aws-authz-smart
1 CVE
Opensearch Notifications
opensearch_notifications
1 CVE
Cloudwatch Agent
cloudwatch_agent
1 CVE
Efs Utils
efs-utils
1 CVE
Elastic File System Container Storage Interface Driver
elastic_file_system_container_storage_interface_driver
1 CVE
Aws Sigv4
aws-sigv4
1 CVE
Alexa
alexa
1 CVE
Aws Dataall
aws-dataall
1 CVE
Ion
ion
1 CVE
Amplify Cli
amplify_cli
1 CVE
Aws Deployment Framework
aws_deployment_framework
1 CVE
Redshift Connector
redshift_connector
1 CVE
Redshift Odbc Driver
redshift_odbc_driver
1 CVE
Harmonix
harmonix
1 CVE
Aurora Mysql
aurora_mysql
1 CVE
Relational Database Service
relational_database_service
1 CVE
Aws Lc Fips Sys
aws-lc-fips-sys
1 CVE
Amazon Ecs Container Agent
amazon_ecs_container_agent
1 CVE
Bedrock Agentcore Starter Toolkit
bedrock_agentcore_starter_toolkit
1 CVE
Aws Api Mcp Server
aws_api_mcp_server
1 CVE
Efs Csi Driver
efs_csi_driver
1 CVE
Cloudfront
cloudfront
1 CVE
Application Load Balancer
application_load_balancer
1 CVE
Advanced Jdbc Wrapper
advanced_jdbc_wrapper
1 CVE
Aws Transform Mcp Server
aws_transform_mcp_server
1 CVE
Documentdb Mcp Server
documentdb_mcp_server
1 CVE
Aws Smithy Json
aws-smithy-json
1 CVE
Amplify Codegen Ui
amplify_codegen_ui
1 CVE
Diagram As Code
diagram-as-code
1 CVE
Aws Amplify Cli
aws_amplify_cli
1 CVE
S3 Store
s3_store
0 CVEs
Sdk Tester
sdk_tester
0 CVEs
Amazon Key
amazon_key
0 CVEs
Echo Show
echo_show
0 CVEs
Echo Plus
echo_plus
0 CVEs
Echo Dot
echo_dot
0 CVEs
Echo Spot
echo_spot
0 CVEs

CVEs (198)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-16601
1Amazon
2Amazon Web Services Freertos
Freertos
Nov 21, 2024
Dec 6, 2018
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. A crafted IP header triggers a full memor...Show more
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. A crafted IP header triggers a full memory space copy in prvProcessIPPacket, leading to denial of service and possibly remote code execution.Show less
CVE-2018-16600
1Amazon
2Amazon Web Services Freertos
Freertos
Nov 21, 2024
Dec 6, 2018
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsin...Show more
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of ARP packets in eARPProcessPacket can be used for information disclosure.Show less
CVE-2018-16599
1Amazon
2Amazon Web Services Freertos
Freertos
Nov 21, 2024
Dec 6, 2018
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsin...Show more
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of NBNS packets in prvTreatNBNS can be used for information disclosure.Show less
CVE-2018-16598
1Amazon
2Amazon Web Services Freertos
Freertos
Nov 21, 2024
Dec 6, 2018
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. In xProcessReceivedUDPPacket and prvParse...Show more
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. In xProcessReceivedUDPPacket and prvParseDNSReply, any received DNS response is accepted, without confirming it matches a sent DNS request.Show less
CVE-2018-16528
1Amazon
1Amazon Web Services Freertos
Nov 21, 2024
Dec 6, 2018
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruption in prvSetupConnection and GGD_SecureConnect_Connect in AWS TLS connectivity...Show more
Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruption in prvSetupConnection and GGD_SecureConnect_Connect in AWS TLS connectivity modules.Show less
CVE-2018-16527
1Amazon
2Amazon Web Services Freertos
Freertos
Nov 21, 2024
Dec 6, 2018
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of ICMP packets in prvPro...Show more
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of ICMP packets in prvProcessICMPPacket.Show less
CVE-2018-16526
1Amazon
2Amazon Web Services Freertos
Freertos
Nov 21, 2024
Dec 6, 2018
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary code...Show more
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary code because of a Buffer Overflow during generation of a protocol checksum in usGenerateProtocolChecksum and prvProcessIPPacket.Show less
CVE-2018-16525
1Amazon
2Amazon Web Services Freertos
Freertos
Nov 21, 2024
Dec 6, 2018
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information...Show more
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information because of a Buffer Overflow during parsing of DNS\LLMNR packets in prvParseDNSReply.Show less
CVE-2018-16524
1Amazon
2Amazon Web Services Freertos
Freertos
Nov 21, 2024
Dec 6, 2018
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of TCP options in prvChec...Show more
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of TCP options in prvCheckOptions.Show less
CVE-2018-16523
1Amazon
2Amazon Web Services Freertos
Freertos
Nov 21, 2024
Dec 6, 2018
N/A· v4
7.4 HIGH· v3
5.8 MEDIUM· v2
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow division by zero in prvCheckOptions.
CVE-2018-16522
1Amazon
1Amazon Web Services Freertos
Nov 21, 2024
Dec 6, 2018
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS_SetSockOpt.
CVE-2018-19190
1Amazon
1Payfort Php Sdk
Nov 21, 2024
Nov 14, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php error_msg parameter.
CVE-2018-19189
1Amazon
1Payfort Php Sdk
Nov 21, 2024
Nov 14, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in an error.php echo statement.
CVE-2018-19188
1Amazon
1Payfort Php Sdk
Nov 21, 2024
Nov 14, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter.
CVE-2018-19187
1Amazon
1Payfort Php Sdk
Nov 21, 2024
Nov 14, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement.
CVE-2018-19186
1Amazon
1Payfort Php Sdk
Nov 21, 2024
Nov 14, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter.
CVE-2018-11025
1Amazon
1Fire Os
Nov 21, 2024
Oct 16, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/twl6030-gpadc with t...Show more
kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/twl6030-gpadc with the command 24832 and cause a kernel crash.Show less
CVE-2018-11024
1Amazon
1Fire Os
Nov 21, 2024
Oct 16, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with th...Show more
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 1077435789 and cause a kernel crash.Show less
CVE-2018-11023
1Amazon
1Fire Os
Nov 21, 2024
Oct 16, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with th...Show more
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3222560159 and cause a kernel crash.Show less
CVE-2018-11022
1Amazon
1Fire Os
Nov 21, 2024
Oct 16, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the...Show more
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3224132973 and cause a kernel crash.Show less