Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03.Check if you run itEPSS 2.32%Oct 12, 2026
- Low2.0A weakness has been identified in y_project RuoYi up to 4.8.3.Check if you run itEPSS 0.20%Oct 12, 2026
- Medium5.4An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package.Check if you run itEPSS 0.15%Oct 12, 2026
- Medium6.5A flaw has been found in **permission filters** in the **foreman** package.Check if you run itEPSS 0.18%Oct 12, 2026
- High7.8Deserialization of Untrusted DataCheck if you run itEPSS 0.18%Oct 12, 2026
- High8.8The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22).Check if you run itEPSS 0.41%Oct 12, 2026
- High7.3Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.Check if you run itEPSS 0.12%Oct 12, 2026
- Medium6.9Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.Check if you run itEPSS 0.10%Oct 12, 2026
- Medium5.1Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.Check if you run itEPSS 0.17%Oct 12, 2026
- Medium6.8Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.Check if you run itEPSS 0.14%Oct 12, 2026
- Medium5.9Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.Check if you run itEPSS 0.10%Oct 12, 2026
- Medium6.1Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.Check if you run itEPSS 0.19%Oct 12, 2026
- Medium5.1Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.Check if you run itEPSS 0.14%Oct 12, 2026
- Medium6.0Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script.Check if you run itEPSS 0.31%Oct 12, 2026
- Low2.1Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.Check if you run itEPSS 0.10%Oct 12, 2026
- Medium5.1Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsu…Check if you run itEPSS 0.11%Oct 12, 2026
- Medium5.1Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with…Check if you run itEPSS 0.11%Oct 12, 2026
- Medium5.1Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung…Check if you run itEPSS 0.12%Oct 12, 2026
- Medium6.9Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.Check if you run itEPSS 0.11%Oct 12, 2026
- Medium6.9Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.Check if you run itEPSS 0.12%Oct 12, 2026
- High8.6Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.Check if you run itEPSS 0.12%Oct 12, 2026
- High8.6Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.Check if you run itEPSS 0.12%Oct 12, 2026
- Medium6.7Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile…Check if you run itEPSS 0.11%Oct 12, 2026
- High7.0Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.Check if you run itEPSS 0.13%Oct 12, 2026
- Medium6.9Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.Check if you run itEPSS 0.11%Oct 12, 2026
Sort