CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 09/02/2023 |
| CVE-2023-21448 | BAJO3.3 | Path traversal vulnerability in Samsung Cloud prior to version 5.3.0.32 allows attacker to access specific png file. | 09/02/2023 |
| CVE-2023-21447 | BAJO3.3 | Improper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local attackers to access information with Samsung Cloud's privilege via implicit intent. | 09/02/2023 |
| CVE-2023-21444 | ALTO8.8 | Improper cryptographic implementation in Samsung Flow for PC 4.9.14.0 allows adjacent attackers to decrypt encrypted messages or inject commands. | 09/02/2023 |
| CVE-2023-21443 | ALTO8.8 | Improper cryptographic implementation in Samsung Flow for Android prior to version 4.9.04 allows adjacent attackers to decrypt encrypted messages or inject commands. | 09/02/2023 |
| CVE-2023-21434 | MEDIO6.1 | Improper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to execute JavaScript by launching a web page. | 09/02/2023 |
| CVE-2023-21433 | ALTO7.8 | Improper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to install applications from Galaxy Store. | 09/02/2023 |
| CVE-2023-21432 | ALTO7.8 | Improper access control vulnerabilities in Smart Things prior to 1.7.93 allows to attacker to invite others without authorization of the owner. | 09/02/2023 |
| CVE-2023-21431 | BAJO3.3 | Improper input validation in Bixby Vision prior to version 3.7.70.17 allows attacker to access data of Bixby Vision. | 09/02/2023 |
| CVE-2022-39915 | MEDIO5.5 | Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13) allows attackers to access sensitive information via implicit intent. | 08/12/2022 |
| CVE-2022-39911 | MEDIO6.8 | Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass. | 08/12/2022 |
| CVE-2022-39910 | MEDIO4.2 | Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view. | 08/12/2022 |
| CVE-2022-39909 | MEDIO5.5 | Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link. | 08/12/2022 |
| CVE-2022-39893 | BAJO3.3 | Sensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to version 4.1.22092751 allows local attackers with log access permission to get device identifier data through device log. | 09/11/2022 |
| CVE-2022-39892 | CRÍTICO9.8 | Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature. | 09/11/2022 |
| CVE-2022-39891 | ALTO7.5 | Heap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows attacker to get information. | 09/11/2022 |
| CVE-2022-39890 | ALTO7.5 | Improper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information. | 09/11/2022 |
| CVE-2022-39889 | BAJO3.3 | Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable device information. | 09/11/2022 |