Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with…Check if you run itEPSS 0.11%Oct 12, 2026
- Medium5.1Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung…Check if you run itEPSS 0.12%Oct 12, 2026
- Medium6.9Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.Check if you run itEPSS 0.11%Oct 12, 2026
- Medium6.9Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.Check if you run itEPSS 0.12%Oct 12, 2026
- High8.6Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.Check if you run itEPSS 0.12%Oct 12, 2026
- High8.6Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.Check if you run itEPSS 0.12%Oct 12, 2026
- Medium6.7Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile…Check if you run itEPSS 0.11%Oct 12, 2026
- High7.0Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.Check if you run itEPSS 0.13%Oct 12, 2026
- Medium6.9Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.Check if you run itEPSS 0.11%Oct 12, 2026
- High8.9Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.Check if you run itEPSS 0.12%Oct 12, 2026
- Medium4.8Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.Check if you run itEPSS 0.11%Oct 12, 2026
- Medium6.9Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.Check if you run itEPSS 0.10%Oct 12, 2026
- Medium5.1Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.Check if you run itEPSS 0.11%Oct 12, 2026
- Medium5.1Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.Check if you run itEPSS 0.12%Oct 12, 2026
- Medium5.1Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.Check if you run itEPSS 0.12%Oct 12, 2026
- High7.0Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.Check if you run itEPSS 0.13%Oct 12, 2026
- Medium5.3A vulnerability was identified in yangzongzhuan RuoYi 4.8.3.Check if you run itEPSS 0.15%Oct 12, 2026
- Medium6.9A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206.Check if you run itEPSS 0.28%Oct 12, 2026
- Medium5.3A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206.Check if you run itEPSS 0.22%Oct 12, 2026
- High7.2VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data.Check if you run itEPSS 0.19%Oct 12, 2026
- Low3.6ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the sa…Check if you run itEPSS 0.16%Oct 12, 2026
- Medium5.3A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206.Check if you run itEPSS 0.20%Oct 12, 2026
- Low2.0A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab.Check if you run itEPSS 0.39%Oct 12, 2026
- Critical9.8In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages.Check if you run itEPSS 0.46%Oct 12, 2026
- Low1.9A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2.Check if you run itEPSS 0.11%Oct 12, 2026
Sort