Amazon

153 tracked vulnerabilities.

CVE-2021-40830 MEDIUM
AWS IoT Device SDK - TLS Spoofing
Nov 23, 2021
CVSS 6.3
EPSS 0.00
CVE-2021-40829 MEDIUM
AWS IoT Device SDK v2 - SSL/TLS
Nov 23, 2021
CVSS 6.3
EPSS 0.00
CVE-2021-40828 MEDIUM
AWS IoT Device SDK v2 - SSL/TLS
Nov 23, 2021
CVSS 6.3
EPSS 0.00
CVE-2021-43997 HIGH
FreeRTOS 10.2.0-10.4.6 - Privilege Escalation
Nov 17, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-41150 HIGH
Tough <0.12.0 - Code Injection
Oct 19, 2021
CVSS 8.2
EPSS 0.01
CVE-2021-41149 HIGH
Tough <0.12.0 - Code Injection
Oct 19, 2021
CVSS 8.2
EPSS 0.01
CVE-2021-38112 HIGH
Amazon AWS WorkSpaces <3.1.8 - RCE
Sep 22, 2021
CVSS 8.8
EPSS 0.18
CVE-2021-30355 HIGH
Amazon Kindle <5.13.4 - Privilege Escalation
Sep 01, 2021
CVSS 8.6
EPSS 0.00
CVE-2021-30354 HIGH
Amazon Kindle <5.13.4 - Code Injection
Sep 01, 2021
CVSS 8.6
EPSS 0.01
CVE-2020-36363 CRITICAL
Amazon Cloudfront - Broken Cryptographic Algorithm
Aug 12, 2021
CVSS 9.8
EPSS 0.00
CVE-2021-37436 MEDIUM
Amazon Echo Dot - Info Disclosure
Jul 24, 2021
CVSS 4.2
EPSS 0.00
CVE-2021-31828 HIGH
Amazon Open Distro < 1.13.1.0 - SSRF
May 06, 2021
CVSS 7.1
EPSS 0.00
CVE-2021-32020 CRITICAL
Amazon Freertos < 10.4.3 - Memory Corruption
May 03, 2021
CVSS 9.8
EPSS 0.01
CVE-2021-31572 CRITICAL
Amazon Freertos < 10.4.3 - Integer Overflow
Apr 22, 2021
CVSS 9.8
EPSS 0.01
CVE-2021-31571 CRITICAL
Amazon Freertos < 10.4.3 - Integer Overflow
Apr 22, 2021
CVSS 9.8
EPSS 0.01
CVE-2020-28472 HIGH
@aws-sdk/shared-ini-file-loader <1.0.0-rc.9 - Prototype Pollution
Jan 19, 2021
CVSS 7.3
EPSS 0.02
CVE-2020-8897 MEDIUM
AWS Encryption SDK <2.0.0 - Info Disclosure
Nov 16, 2020
CVSS 4.8
EPSS 0.00
CVE-2020-27174 HIGH
Amazon AWS Firecracker <0.21.3-0.22.1 - Memory Corruption
Oct 16, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-8912 LOW
Amazon Aws S3 Crypto SDK < 2.0 - Broken Cryptographic Algorithm
Aug 11, 2020
CVSS 2.5
EPSS 0.00
CVE-2020-8911 MEDIUM
Amazon Aws S3 Crypto SDK < 2.0 - Broken Cryptographic Algorithm
Aug 11, 2020
CVSS 5.6
EPSS 0.00
CVE-2020-16843 MEDIUM
Amazon Firecracker - Denial of Service
Aug 04, 2020
CVSS 5.9
EPSS 0.00
CVE-2020-15093 HIGH
Tough <0.7.1 - Code Injection
Jul 09, 2020
CVSS 8.6
EPSS 0.00
CVE-2019-14652 MEDIUM
Amazon AWS JavaScript S3 Explorer <2019-08-02 - XSS
Feb 13, 2020
CVSS 6.1
EPSS 0.00
CVE-2019-10777 CRITICAL
Amazon Aws Lambda < 1.0.5 - OS Command Injection
Jan 08, 2020
CVSS 9.8
EPSS 0.01
CVE-2019-3984 CRITICAL
Amazon Blink Xt2 Sync Module Firmware < 2.3.11 - OS Command Injection
Dec 31, 2019
CVSS 9.8
EPSS 0.03
Products
freertos 17 amazon_web_services_freertos 14 fire_os 13 opensearch 11 blink_xt2_sync_module_firmware 7 tough 7 payfort-php-sdk 5 data.all 5 firecracker 4 freertos-plus-tcp 4 amazon_web_services_internet_of_things_device_software_development_kit_v2 4 aws_software_development_kit 4 aws_cloud_development_kit 4 amazon_web_services_aws-c-io 3 opensearch_data_prepper 3 echo_dot_firmware 3 aws_client_vpn 2 workspaces 2 audible 2 aws_s3_crypto_sdk 2 log4jhotpatch 2 opensearch_security 2 amazon_web_services_redshift_java_database_connectivity_driver 2 kindle_touch 2 awslabs_sandbox_accounts_for_events 2 kindle_firmware 2 aws_encryption_sdk 2 kindle_for_pc 2 awsui\/components-react 1 aws-sigv4 1
Quick Filters
Critical CVEs With Exploits In CISA KEV