CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 04/10/2023 |
| CVE-2023-41929 | 높음7.3 | A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. (An attacker must already have user privileges on Windows to exploit this vulnerability.) | 18/09/2023 |
| CVE-2023-30730 | 보통5.5 | Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file. | 06/09/2023 |
| CVE-2023-30729 | 높음7.5 | Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept the network traffic including sensitive information. | 06/09/2023 |
| CVE-2023-30728 | 보통5.5 | Intent redirection vulnerability in PackageInstallerCHN prior to version 13.1.03.00 allows local attacker to access arbitrary file. This vulnerability requires user interaction. | 06/09/2023 |
| CVE-2023-30726 | 보통5.5 | PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data. | 06/09/2023 |
| CVE-2023-30725 | 보통5.5 | Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider. | 06/09/2023 |
| CVE-2023-30724 | 낮음3.3 | Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history. | 06/09/2023 |
| CVE-2023-30723 | 심각9.8 | Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrary file with Samsung Health privilege. | 06/09/2023 |
| CVE-2023-30722 | 높음7.8 | Protection Mechanism Failure in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.13.5 allows local attacker to execute arbitrary code. | 06/09/2023 |
| CVE-2021-35309 | 높음7.5 | An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks. | 22/08/2023 |
| CVE-2023-40293 | 보통6.8 | Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object. | 14/08/2023 |
| CVE-2023-40292 | 보통4.3 | Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets. | 14/08/2023 |
| CVE-2023-40291 | 보통6.8 | Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name. | 14/08/2023 |
| CVE-2023-30705 | 보통5.5 | Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission. | 10/08/2023 |
| CVE-2023-30704 | 보통4.6 | Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without user authentication. | 10/08/2023 |
| CVE-2023-30703 | 보통4.3 | Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information. | 10/08/2023 |