Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-40788 State: PUBLISHED Published: 2022-03-16T14:03:07.823Z Last Updated: 2025-04-23T18:50:02.015Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Premiere Elements Problem Types: CWE-476 Description: Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Progr
CVE ID: CVE-2021-40789 State: PUBLISHED Published: 2022-03-16T14:03:09.955Z Last Updated: 2025-04-23T18:49:40.908Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Premiere Elements Problem Types: CWE-476 Description: Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Progr
CVE ID: CVE-2021-40790 State: PUBLISHED Published: 2023-09-07T12:54:42.216Z Last Updated: 2025-02-27T20:59:33.524Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Premiere Pro Problem Types: CWE-416 Description: Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
ctim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/premiere_pro/apsb21-117.html
CVE ID: CVE-2021-40791 State: PUBLISHED Published: 2023-09-07T12:54:38.479Z Last Updated: 2025-02-27T20:59:39.980Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Premiere Pro Problem Types: CWE-125 Description: Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/premiere_pro/apsb21-117.html
CVE ID: CVE-2021-40792 State: PUBLISHED Published: 2022-03-16T14:03:13.289Z Last Updated: 2025-04-23T18:49:13.501Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-788 Description: Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/premiere_pro/apsb21-100
gram Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html
CVE ID: CVE-2021-40793 State: PUBLISHED Published: 2022-03-16T14:03:16.550Z Last Updated: 2025-04-23T18:48:54.797Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-788 Description: Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/premiere_pro/apsb21-100
CVE ID: CVE-2021-40794 State: PUBLISHED Published: 2022-03-16T14:03:14.509Z Last Updated: 2025-04-23T18:49:04.838Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-788 Description: Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/premiere_pro/apsb21-100
CVE ID: CVE-2021-40795 State: PUBLISHED Published: 2023-09-07T12:54:34.886Z Last Updated: 2025-02-27T21:00:01.575Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Pro Problem Types: CWE-125 Description: Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Cont
ssue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/premiere_pro/apsb21-117.html
CVE ID: CVE-2021-40796 State: PUBLISHED Published: 2022-03-16T14:03:10.960Z Last Updated: 2025-04-23T18:49:30.084Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-476 Description: Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
raction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html
CVE ID: CVE-2021-40797 State: PUBLISHED Published: 2021-09-08T19:11:40 Last Updated: 2024-08-04T02:51:07.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing amounts of memory, resulting in API performance degradation or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1942179 - https://security.openstack.org/ossa/OSSA-2021-006.html - http://www.openwall.com/lists/oss-
launchpad.net/bugs/1942179 - https://security.openstack.org/ossa/OSSA-2021-006.html - http://www.openwall.com/lists/oss-security/2021/09/09/2
CVE ID: CVE-2021-40809 State: PUBLISHED Published: 2021-12-01T00:10:04 Last Updated: 2024-08-04T02:51:07.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted incorrect privileges in response to authentication that uses specific sign-on workflows. Additional Analyst Notes: - CVE Program Container: References: - https://www.jamf.com/resources/product-documentation/jamf-pro-release-notes/ - https://docs.jamf.com/10.32.0/jamf-pro/release-notes/Resolved_Issues.html - https://blog.assetnote.io/2021/11/30/jamf-ssrf/
CVE ID: CVE-2021-40812 State: PUBLISHED Published: 2021-09-08T00:00:00 Last Updated: 2024-10-29T13:45:44.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/libgd/libgd/commit/6f5136821be86e7068fcdf651ae9420b5d42e9a9 - https://github.com/libgd/libgd/issues/750#issuecomment-914872385 - https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html
CVE ID: CVE-2021-40813 State: PUBLISHED Published: 2022-01-13T17:38:43 Last Updated: 2024-08-04T02:51:06.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote authenticated users to inject arbitrary web script or HTML via filenames. Additional Analyst Notes: - CVE Program Container: References: - https://www.element-it.com/products.aspx - https://www.exploit-db.com/exploits/50645
CVE ID: CVE-2021-40814 State: PUBLISHED Published: 2021-09-08T21:09:28 Last Updated: 2024-08-04T02:51:06.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.getastra.com/blog/911/plugin-exploit/prestashops-customer-photo-gallery-module-vulnerable-to-sql-injection-attacks/
CVE ID: CVE-2021-40818 State: PUBLISHED Published: 2021-09-08T21:47:32 Last Updated: 2024-08-04T02:51:07.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: scheme/webauthn.c in Glewlwyd SSO server through 2.5.3 has a buffer overflow during FIDO2 signature validation in webauthn registration. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/babelouest/glewlwyd/commit/0efd112bb62f566877750ad62ee828bff579b4e2 - https://bugs.debian.org/993867
CVE ID: CVE-2021-40822 State: PUBLISHED Published: 2022-05-01T23:17:25 Last Updated: 2024-08-04T02:51:07.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/geoserver/geoserver/releases - https://osgeo-org.atlassian.net/browse/GEOS-10229 - https://github.com/geoserver/geoserver/compare/2.19.2...2.19.3 - https://osgeo-org.atlassian.net/browse/GEOS-10229?focusedCommentId=83508
CVE ID: CVE-2021-40823 State: PUBLISHED Published: 2021-09-13T18:45:50 Last Updated: 2024-08-04T02:51:06.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a malicious Matrix homeserver present in an encrypted room to steal room encryption keys (via crafted Matrix protocol messages) that were originally sent by affected Matrix clients participating in that room. This allows the homeserver to decrypt end-to-end encrypted messages sent by affected clients. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-org/matrix-js-sdk/r
clients. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-org/matrix-js-sdk/releases/tag/v12.4.1 - https://matrix.org/blog/2021/09/13/vulnerability-disclosure-key-sharing
CVE ID: CVE-2021-40824 State: PUBLISHED Published: 2021-09-13T18:49:28 Last Updated: 2024-08-04T02:51:07.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 allows a malicious Matrix homeserver present in an encrypted room to steal room encryption keys (via crafted Matrix protocol messages) that were originally sent by affected Matrix clients participating in that room. This allows the attacker to decrypt end-to-end encrypted messages sent by affected clients. Additional Analyst Notes: - CVE Program Container: References: - https://
d encrypted messages sent by affected clients. Additional Analyst Notes: - CVE Program Container: References: - https://matrix.org/blog/2021/09/13/vulnerability-disclosure-key-sharing - https://github.com/matrix-org/matrix-android-sdk2/releases/tag/v1.2.2
CVE ID: CVE-2021-40825 State: PUBLISHED Published: 2021-09-17T16:54:39 Last Updated: 2024-08-04T02:51:06.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: nLight ECLYPSE (nECY) system Controllers running software prior to 1.17.21245.754 contain a default key vulnerability. The nECY does not force a change to the key upon the initial configuration of an affected device. nECY system controllers utilize an encrypted channel to secure SensorViewTM configuration and monitoring software and nECY to nECY communications. Impacted devices are at risk of exploitation. A remote attacker with IP access to an impacted device could submit lighting control commands to the nECY by leveraging t
remote attacker with IP access to an impacted device could submit lighting control commands to the nECY by leveraging the default key. A successful attack may result in the attacker gaining the ability to modify lighting conditions or gain the ability to update the software on lighting devices. The impacted key is referred to as the SensorView Password in the nECY nLight Explorer Interface and the Gateway Password in the SensorView application. An attacker cannot authenticate to or modify the configuration or software of the nECY system controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.acuitybrands.com/products/detail/588952/nlight/necy-system-controll
: - CVE Program Container: References: - https://www.acuitybrands.com/products/detail/588952/nlight/necy-system-controller/nlight-eclypset-system-controller - https://insights.acuitybrands.com/psirt-blog-2369078/nlight-eclypse-default-key-vulnerabiliy
CVE ID: CVE-2021-40826 State: PUBLISHED Published: 2021-12-15T06:38:13 Last Updated: 2024-08-04T02:51:06.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine. Attackers could exploit this issue to cause a crash (DoS) of the clementine.exe process or achieve arbitrary code execution in the context of the current logged-in Windows user. Additional Analyst Notes: - CVE Program Container: Reference
ution in the context of the current logged-in Windows user. Additional Analyst Notes: - CVE Program Container: References: - https://voidsec.com/advisories/cve-2021-40826/
CVE ID: CVE-2021-40827 State: PUBLISHED Published: 2021-12-15T06:37:28 Last Updated: 2024-08-04T02:51:07.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine. Attackers could exploit this issue to cause a crash (DoS) of the clementine.exe process or achieve arbitrary code execution in the context of the current logged-in Windows user. Additional Analyst Notes: -
ss or achieve arbitrary code execution in the context of the current logged-in Windows user. Additional Analyst Notes: - CVE Program Container: References: - https://voidsec.com/advisories/cve-2021-40827/
CVE ID: CVE-2021-40828 State: PUBLISHED Published: 2021-11-22T23:41:16 Last Updated: 2024-08-04T02:51:06.830Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Amazon Web Services Products: AWS IoT Device SDK v2 for Java , AWS IoT Device SDK v2 for Python, AWS IoT Device SDK v2 for C++, AWS IoT Device SDK v2 for Node.js, AWS-C-IO Problem Types: Connections initialized by the AWS IoT Device SDK v2 for Java, Python, C++ and Node.js did not verify server certificate hostname during TLS handshake when overriding Certificate Authorities (CA) in their trust stores on Windows. Description: Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior
eir trust stores on Windows. Description: Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.3.3), Python (versions prior to 1.5.18), C++ (versions prior to 1.12.7) and Node.js (versions prior to 1.5.1) did not verify server certificate hostname during TLS handshake when overriding Certificate Authorities (CA) in their trust stores on Windows. This issue has been addressed in aws-c-io submodule versions 0.9.13 onward. This issue affects: Amazon Web Services AWS IoT Device SDK v2 for Java versions prior to 1.3.3 on Microsoft Windows. Amazon Web Services AWS IoT Device SDK v2 for Python versions prior to 1.5.18 on Microsoft Windows. Amazon Web Services AWS IoT D
b Services AWS IoT Device SDK v2 for Python versions prior to 1.5.18 on Microsoft Windows. Amazon Web Services AWS IoT Device SDK v2 for C++ versions prior to 1.12.7 on Microsoft Windows. Amazon Web Services AWS IoT Device SDK v2 for Node.js versions prior to 1.5.3 on Microsoft Windows. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/awslabs/aws-c-io/ - https://github.com/aws/aws-iot-device-sdk-cpp-v2 - https://github.com/aws/aws-iot-device-sdk-python-v2 - https://github.com/aws/aws-iot-device-sdk-java-v2 - https://github.com/aws/aws-iot-device-sdk-js-v2
CVE ID: CVE-2021-40829 State: PUBLISHED Published: 2021-11-22T23:41:17 Last Updated: 2024-08-04T02:51:06.986Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Amazon Web Services Products: AWS IoT Device SDK v2 for Java , AWS IoT Device SDK v2 for Python, AWS IoT Device SDK v2 for C++, AWS IoT Device SDK v2 for Node.js, AWS-C-IO Problem Types: Connections initialized by the AWS IoT Device SDK v2 for Java, Python, C++ and Node.js did not verify server certificate hostname during TLS handshake when overriding Certificate Authorities (CA) in their trust stores on Windows. Description: Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior
eir trust stores on Windows. Description: Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.4.2), Python (versions prior to 1.6.1), C++ (versions prior to 1.12.7) and Node.js (versions prior to 1.5.3) did not verify server certificate hostname during TLS handshake when overriding Certificate Authorities (CA) in their trust stores on MacOS. This issue has been addressed in aws-c-io submodule versions 0.10.5 onward. This issue affects: Amazon Web Services AWS IoT Device SDK v2 for Java versions prior to 1.4.2 on macOS. Amazon Web Services AWS IoT Device SDK v2 for Python versions prior to 1.6.1 on macOS. Amazon Web Services AWS IoT Device SDK v2 for C++ version
IoT Device SDK v2 for Python versions prior to 1.6.1 on macOS. Amazon Web Services AWS IoT Device SDK v2 for C++ versions prior to 1.12.7 on macOS. Amazon Web Services AWS IoT Device SDK v2 for Node.js versions prior to 1.5.3 on macOS. Amazon Web Services AWS-C-IO 0.10.4 on macOS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/awslabs/aws-c-io/ - https://github.com/aws/aws-iot-device-sdk-cpp-v2 - https://github.com/aws/aws-iot-device-sdk-python-v2 - https://github.com/aws/aws-iot-device-sdk-java-v2 - https://github.com/aws/aws-iot-device-sdk-js-v2
CVE ID: CVE-2021-40830 State: PUBLISHED Published: 2021-11-22T23:41:18 Last Updated: 2024-08-04T02:51:06.863Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Amazon Web Services Products: AWS IoT Device SDK v2 for Java , AWS IoT Device SDK v2 for Python, AWS IoT Device SDK v2 for C++, AWS IoT Device SDK v2 for Node.js, AWS-C-IO Problem Types: The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority (CA) to the root CAs instead of overriding it on Unix systems. TLS handshakes will thus succeed if the peer can be verified either from the user-supplied CA or the system’s default trust-store. Attackers with access
if the peer can be verified either from the user-supplied CA or the system’s default trust-store. Attackers with access to a host’s trust stores or are able to compromise a certificate authority already in the host's trust store (note: the attacker must also be able to spoof DNS in this case) may be able to use this issue to bypass CA pinning. An attacker could then spoof the MQTT broker, and either drop traffic and/or respond with the attacker's data, but they would not be able to forward this data on to the MQTT broker because the attacker would still need the user's private keys to authenticate against the MQTT broker. Description: The AWS IoT Device SDK v2 for Java, Python, C++ and Node
vate keys to authenticate against the MQTT broker. Description: The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority (CA) to the root CAs instead of overriding it on Unix systems. TLS handshakes will thus succeed if the peer can be verified either from the user-supplied CA or the system’s default trust-store. Attackers with access to a host’s trust stores or are able to compromise a certificate authority already in the host's trust store (note: the attacker must also be able to spoof DNS in this case) may be able to use this issue to bypass CA pinning. An attacker could then spoof the MQTT broker, and either drop traffic and/or respond wit
his issue to bypass CA pinning. An attacker could then spoof the MQTT broker, and either drop traffic and/or respond with the attacker's data, but they would not be able to forward this data on to the MQTT broker because the attacker would still need the user's private keys to authenticate against the MQTT broker. The 'aws_tls_ctx_options_override_default_trust_store_*' function within the aws-c-io submodule has been updated to override the default trust store. This corrects this issue. This issue affects: Amazon Web Services AWS IoT Device SDK v2 for Java versions prior to 1.5.0 on Linux/Unix. Amazon Web Services AWS IoT Device SDK v2 for Python versions prior to 1.6.1 on Linux/Unix. Amazon
1.5.0 on Linux/Unix. Amazon Web Services AWS IoT Device SDK v2 for Python versions prior to 1.6.1 on Linux/Unix. Amazon Web Services AWS IoT Device SDK v2 for C++ versions prior to 1.12.7 on Linux/Unix. Amazon Web Services AWS IoT Device SDK v2 for Node.js versions prior to 1.5.3 on Linux/Unix. Amazon Web Services AWS-C-IO 0.10.4 on Linux/Unix. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/awslabs/aws-c-io/ - https://github.com/aws/aws-iot-device-sdk-cpp-v2 - https://github.com/aws/aws-iot-device-sdk-python-v2 - https://github.com/aws/aws-iot-device-sdk-java-v2 - https://github.com/aws/aws-iot-device-sdk-js-v2