Vulnerabilities (CVE)

Filtered by vendor Blynk Subscribe
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-29496 1 Blynk 1 Blynk-library 2024-02-28 7.5 HIGH 9.8 CRITICAL
A stack-based buffer overflow vulnerability exists in the BlynkConsole.h runCommand functionality of Blynk -Library v1.0.1. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.
CVE-2019-5065 1 Blynk 1 Blynk-library 2024-02-28 5.0 MEDIUM 5.3 MEDIUM
An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability.
CVE-2018-17785 1 Blynk 1 Blynk-server 2024-02-28 5.0 MEDIUM 7.5 HIGH
In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file.
CVE-2014-7019 1 Blynk 1 Clarks Inn 2024-02-28 5.4 MEDIUM N/A
The Clarks Inn (aka com.ClarksInn) application 3.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6969 1 Blynk 1 Deltin Suites 2024-02-28 5.4 MEDIUM N/A
The Deltin Suites (aka com.DeltinSuites) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.