CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21.1090.1. |
| 02/02/2026 |
| CVE-2026-25201 | ALTO8.8 | An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server.
This issue affects MagicINFO 9 Server: less than 21.1090.1. | 02/02/2026 |
| CVE-2026-25200 | CRÍTICO9.8 | A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover
This issue affects MagicINFO 9 Server: less than 21.1090.1. | 02/02/2026 |
| CVE-2026-20976 | ALTO7.8 | Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script. | 09/01/2026 |
| CVE-2026-20975 | MÉDIO5.5 | Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path. | 09/01/2026 |
| CVE-2025-57836 | ALTO7.8 | An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer creates a temporary folder with weak permissions during installation, allowing a non-admin user to perform DLL hijacking and escalate privileges. | 05/01/2026 |
| CVE-2025-58488 | MÉDIO6.5 | Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability. | 02/12/2025 |
| CVE-2025-58487 | BAIXO3.3 | Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege. | 02/12/2025 |
| CVE-2025-58486 | MÉDIO5.5 | Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script. | 02/12/2025 |
| CVE-2025-58485 | MÉDIO5.5 | Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script. | 02/12/2025 |
| CVE-2025-58483 | BAIXO3.3 | Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy Store. | 02/12/2025 |
| CVE-2025-58482 | ALTO7.3 | Improper access control in MPLocalService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service. | 02/12/2025 |
| CVE-2025-58481 | ALTO7.8 | Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service. | 02/12/2025 |
| CVE-2025-21079 | ALTO8.1 | Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability. | 05/11/2025 |
| CVE-2025-21078 | MÉDIO6.5 | Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications. | 05/11/2025 |
| CVE-2025-21077 | BAIXO3.3 | Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege. | 05/11/2025 |
| CVE-2025-21076 | MÉDIO5.5 | Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability. | 05/11/2025 |