Vulnerabilities

TI-2022-11958 CVE-2022-29496 · GHSA-4v52-cfm2-5xvm

Stack-based buffer overflow in Blynk-Library

HIGH 76

A stack-based buffer overflow vulnerability exists in the BlynkConsole.h runCommand functionality of Blynk -Library v1.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0218 Published 2022-06-17 No fix listed CWE-121

TI-2019-03526 CVE-2019-5065 · GHSA-gxh9-wgg7-4vx9

Out-of-bounds read in Blynck Inc

LOW 28

An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01876 Published 2019-09-05 No fix listed CWE-125

TI-2018-12658 CVE-2018-17785 · GHSA-4r64-wf76-c53p

In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI…

LOW 37

In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02122 Published 2018-09-30 Fixed in 0.39.7 CWE-22

TI-2014-05853 CVE-2014-7019 · GHSA-842j-c29p-f9pc

The Clarks Inn (aka com.ClarksInn) application 3.3.0 for Android does not verify X.509…

LOW 24

The Clarks Inn (aka com.ClarksInn) application 3.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a craft…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00292 Published 2014-10-16 No fix listed CWE-310

TI-2014-05804 CVE-2014-6969 · GHSA-3x8g-fh7w-4466

The Deltin Suites (aka com.DeltinSuites) application 3.4.1 for Android does not verify…