amazon Vulnerability Advisory Catalog

Total 181 security vulnerabilities recorded for amazon software and firmware.

← Back to All Vendors
Component: audible

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched fro...

📅 2017-12-06
CVSS 7.8 Dossier →
Component: amazon_key_firmware

Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for (1) delivery ...

📅 2017-11-16
CVSS 6.5 Dossier →
Component: amazon_web_services_cloudformation_bootstrap

The Amazon Web Services (AWS) CloudFormation bootstrap tools package (aka aws-cfn-bootstrap) before 1.4-19.10 allows local users to execute arbitrary ...

📅 2017-10-30
CVSS 7.8 Dossier →
CVE-2015-7292 CRITICAL
Component: fire_os

Stack-based buffer overflow in the havok_write function in drivers/staging/havok/havok.c in Amazon Fire OS before 2016-01-15 allows attackers to cause...

📅 2017-04-10
CVSS 9.8 Dossier →
Component: kindle_for_pc

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks...

📅 2017-03-15
CVSS 7.3 Dossier →
CVE-2014-3908 UNKNOWN
Component: kindle

The Amazon.com Kindle application before 4.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attacke...

📅 2014-08-30
CVSS 5.8 Dossier →
Component: ec2_api_tools_java_library

Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matche...

📅 2012-11-04
CVSS 7.4 Dossier →
CVE-2012-5782 UNKNOWN
Component: flexible_payments_service

Amazon Flexible Payments Service (FPS) PHP Library does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or...

📅 2012-11-04
CVSS 5.8 Dossier →
CVE-2012-5781 UNKNOWN
Component: elastic_load_balancing

Amazon Elastic Load Balancing API Tools does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAlt...

📅 2012-11-04
CVSS 5.8 Dossier →
CVE-2012-5780 UNKNOWN
Component: merchant_sdk

The Amazon merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of th...

📅 2012-11-04
CVSS 5.8 Dossier →
CVE-2010-5268 UNKNOWN
Component: kindle_for_pc

Untrusted search path vulnerability in Amazon Kindle for PC 1.3.0 30884 allows local users to gain privileges via a Trojan horse wintab32.dll file in ...

📅 2012-09-07
CVSS 6.9 Dossier →
CVE-2012-4249 UNKNOWN
Component: kindle_touch

The Amazon Lab126 com.lab126.system sendEvent implementation on the Kindle Touch before 5.1.2 allows context-dependent attackers to execute arbitrary ...

📅 2012-08-12
CVSS 10.0 Dossier →
CVE-2012-4248 UNKNOWN
Component: kindle_touch

The Amazon Kindle Touch before 5.1.2 does not properly restrict access to the libkindleplugin.so NPAPI plugin interface, which might allow remote atta...

📅 2012-08-12
CVSS 9.3 Dossier →
Page 8 of 8 (181 Total Records)