Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.0Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display.Check if you run itEPSS 0.11%Sep 3, 2025
- Medium5.5Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items.Check if you run itEPSS 0.11%Sep 3, 2025
- Medium5.1Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM.Check if you run itEPSS 0.11%Sep 3, 2025
- Medium6.4Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service.Check if you run itEPSS 0.10%Sep 3, 2025
- Medium6.1Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install pCheck if you run itEPSS 0.16%Sep 3, 2025
- Medium5.4Improper URL input validation vulnerability in Samsung Account application prior to version 14.1.0.0 allows remote attackers to get sensitive information.Check if you run itEPSS 0.29%Sep 3, 2025
- High8.5Improper input validation vulnerability in CertByte prior to SMR Apr-2023 Release 1 allows local attackers to launch privileged activities.Check if you run itEPSS 0.13%Sep 3, 2025
- Medium5.3Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 allows remote attackers to register a schedule.Check if you run itEPSS 0.38%Sep 3, 2025
- Medium6.0Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data.Check if you run itEPSS 0.13%Sep 3, 2025
- Medium4.0Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.NETWORK_Check if you run itEPSS 0.12%Sep 3, 2025
- Medium4.0Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.GEOFENCECheck if you run itEPSS 0.12%Sep 3, 2025
- Medium5.9Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers to access files with escalated permission.Check if you run itEPSS 0.13%Sep 3, 2025
- Medium6.8Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.39%Sep 3, 2025
- High8.6FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.72%Sep 3, 2025
- Low3.7A flaw was found in glib.Check if you run itEPSS 0.42%Sep 3, 2025
- Medium6.9A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0.Check if you run itEPSS 0.61%Sep 3, 2025
- Medium5.3A weakness has been identified in ScriptAndTools Real Estate Management System 1.0.Check if you run itEPSS 0.40%Sep 3, 2025
- Medium6.9A vulnerability was detected in Das Parking Management System 停车场管理系统 6.2.0.Check if you run itEPSS 0.49%Sep 3, 2025
- High8.8phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/userprofile.php via the fullname parameter.Check if you run itEPSS 0.61%Sep 3, 2025
- High7.2phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/subcategory.php via the categoryName parameter.Check if you run itEPSS 0.62%Sep 3, 2025
- Medium6.5phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-details.php via the cid parameter.Check if you run itEPSS 0.44%Sep 3, 2025
- Critical9.1phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation.Check if you run itEPSS 0.47%Sep 3, 2025
- High7.5A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0.Check if you run itEPSS 0.48%Sep 3, 2025
- High8.1phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter.Check if you run itEPSS 0.44%Sep 3, 2025
- Medium5.4Memos 0.22 is vulnerable to Stored Cross site scripting (XSS) vulnerabilities by the upload attachment and user avatar features.Check if you run itEPSS 0.26%Sep 3, 2025
Sort