CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Information exposure vulnerability in Gear S Plugin prior to version 2.2.05.20122441 allows unstrusted applications to access connected BT device information. |
| 11/06/2021 |
| CVE-2021-25405 | 보통5.5 | An improper access control vulnerability in ScreenOffActivity in Samsung Notes prior to version 4.2.04.27 allows untrusted applications to access local files. | 11/06/2021 |
| CVE-2021-25403 | 낮음3.3 | Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9 in Android Q(10.0) and above allows attacker to access contacts and file provider using SettingWebView component. | 11/06/2021 |
| CVE-2021-25402 | 낮음3.3 | Information Exposure vulnerability in Samsung Notes prior to version 4.2.04.27 allows attacker to access s pen latency information. | 11/06/2021 |
| CVE-2021-25401 | 높음7.8 | Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action. | 11/06/2021 |
| CVE-2021-25400 | 높음7.8 | Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action. | 11/06/2021 |
| CVE-2021-25399 | 높음7.1 | Improper configuration in Smart Manager prior to version 11.0.05.0 allows attacker to access the file with system privilege. | 11/06/2021 |
| CVE-2021-25398 | 낮음3.3 | Intent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access contacts. | 11/06/2021 |
| CVE-2021-25381 | 높음7.8 | Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent. | 09/04/2021 |
| CVE-2021-25380 | 높음7.3 | Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker to execute the actions registered by the user. | 09/04/2021 |
| CVE-2021-25379 | 낮음3.3 | Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action. | 09/04/2021 |
| CVE-2021-25378 | 보통5.3 | Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service. | 09/04/2021 |
| CVE-2021-25377 | 높음7.8 | Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attacker to execute privileged action. | 09/04/2021 |
| CVE-2021-25376 | 보통5.3 | An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in plain text when STARTTLS negotiation is failed. | 09/04/2021 |
| CVE-2021-25375 | 보통6.5 | Using predictable index for attachments in Samsung Email prior to version 6.1.41.0 allows remote attackers to get attachments of another emails when users open the malicious attachment. | 09/04/2021 |
| CVE-2021-25374 | 높음7.5 | An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9 in Android P(9.0) and above allows remote attackers to access a user data related with Samsung Account. | 09/04/2021 |
| CVE-2021-25373 | 높음7.8 | Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android P(9.0), 2.7.02.1 in Android Q(10.0) and 2.9.01.1 in Android R(11.0) allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent. | 09/04/2021 |