CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 04/10/2023 |
| CVE-2023-41929 | HIGH7.3 | A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. (An attacker must already have user privileges on Windows to exploit this vulnerability.) | 18/09/2023 |
| CVE-2023-30730 | MEDIUM5.5 | Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file. | 06/09/2023 |
| CVE-2023-30729 | HIGH7.5 | Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept the network traffic including sensitive information. | 06/09/2023 |
| CVE-2023-30728 | MEDIUM5.5 | Intent redirection vulnerability in PackageInstallerCHN prior to version 13.1.03.00 allows local attacker to access arbitrary file. This vulnerability requires user interaction. | 06/09/2023 |
| CVE-2023-30726 | MEDIUM5.5 | PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data. | 06/09/2023 |
| CVE-2023-30725 | MEDIUM5.5 | Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider. | 06/09/2023 |
| CVE-2023-30724 | LOW3.3 | Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history. | 06/09/2023 |
| CVE-2023-30723 | CRITICAL9.8 | Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrary file with Samsung Health privilege. | 06/09/2023 |
| CVE-2023-30722 | HIGH7.8 | Protection Mechanism Failure in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.13.5 allows local attacker to execute arbitrary code. | 06/09/2023 |
| CVE-2021-35309 | HIGH7.5 | An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks. | 22/08/2023 |
| CVE-2023-40293 | MEDIUM6.8 | Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object. | 14/08/2023 |
| CVE-2023-40292 | MEDIUM4.3 | Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets. | 14/08/2023 |
| CVE-2023-40291 | MEDIUM6.8 | Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name. | 14/08/2023 |
| CVE-2023-30705 | MEDIUM5.5 | Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission. | 10/08/2023 |
| CVE-2023-30704 | MEDIUM4.6 | Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without user authentication. | 10/08/2023 |
| CVE-2023-30703 | MEDIUM4.3 | Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information. | 10/08/2023 |