Samsung

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-1302 5Cisco SamsungSun+2 more 5Gs1900 10hp Firmware Keymouse FirmwareNx Os+2 more May 6, 2026 Feb 7, 2016 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h) and 11.1 before 11.1(1j) allow remote a...Show more Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h) and 11.1 before 11.1(1j) allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka Bug ID CSCut12998.Show less
CVE-2015-8281 1Samsung 1Web Viewer May 6, 2026 Jan 15, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows attackers to bypass filesystem encryption via XOR calculations.
CVE-2015-8280 1Samsung 1Web Viewer May 6, 2026 Jan 15, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to discover credentials by reading detailed error messages.
CVE-2015-8279 1Samsung 1Web Viewer May 6, 2026 Jan 15, 2016 N/A· v4 8.6 HIGH· v3 5.0 MEDIUM· v2 Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script.
CVE-2015-7897 1Samsung 1Galaxy S6 May 6, 2026 Nov 16, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 allows remote attackers to gain privileges or cause a denial of service (memory cor...Show more The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 allows remote attackers to gain privileges or cause a denial of service (memory corruption) via a crafted BMP image file.Show less
CVE-2015-8040 1Samsung 1Smartviewer May 6, 2026 Nov 2, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The rtsp_getdlsendtime method in the CNC_Ctrl control in Samsung SmartViewer allows remote attackers to execute arbitrary code via an index value.
CVE-2015-8039 1Samsung 1Smartviewer May 6, 2026 Nov 2, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSetupSave method in the STWAxConfig control or (2) SendCustomPacket method in the STWAxConfigNVR control, which...Show more Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSetupSave method in the STWAxConfig control or (2) SendCustomPacket method in the STWAxConfigNVR control, which trigger an untrusted pointer dereference.Show less
CVE-2015-4034 1Samsung 1Galaxy S5 May 6, 2026 Jul 6, 2015 N/A· v4 N/A· v3 7.9 HIGH· v2 The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung Galaxy S5s allows remote attackers to execute arbitrary files via a crafted Parcelable object in a serialized MethodSpec obj...Show more The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung Galaxy S5s allows remote attackers to execute arbitrary files via a crafted Parcelable object in a serialized MethodSpec object.Show less
CVE-2015-4033 1Samsung 1S Beam May 6, 2026 Jul 6, 2015 N/A· v4 N/A· v3 3.3 LOW· v2 Samsung SBeam allows remote attackers to read arbitrary images by leveraging an NFC connection to access the HTTP server on port 15000.
CVE-2015-3435 1Samsung 1Samsung Security Manager May 6, 2026 May 1, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 Samsung Security Manager (SSM) before 1.31 allows remote attackers to execute arbitrary code by uploading a file with an HTTP (1) PUT or (2) MOVE request.
CVE-2015-0555 1Samsung 1Ipolis Device Manager May 6, 2026 Feb 24, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the (1) ReadConfigVa...Show more Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the (1) ReadConfigValue or (2) WriteConfigValue function.Show less
CVE-2015-1499 1Samsung 1Samsung Security Manager May 6, 2026 Feb 16, 2015 N/A· v4 N/A· v3 8.5 HIGH· v2 The ActiveMQ Broker in Samsung Security Manager (SSM) before 1.31 allows remote attackers to delete arbitrary files, and consequently cause a denial of service, via a DELETE request.
CVE-2014-9266 1Samsung 1Smart Viewer May 6, 2026 Dec 8, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The STWConfig ActiveX control in Samsung SmartViewer does not properly initialize a variable, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2014-9265 1Samsung 1Smartviewer May 6, 2026 Dec 8, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in the BackupToAvi method in the CNC_Ctrl ActiveX control in Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2014-8346 1Samsung 2Findmymobile Mobile May 6, 2026 Oct 24, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service (screen locking with a...Show more The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service (screen locking with an arbitrary code) by triggering unexpected Find My Mobile network traffic.Show less
CVE-2014-3911 1Samsung 1Ipolis Device Manager May 6, 2026 Jun 11, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the (1) Start, (2) ChangeControlLocalName, (3) DeleteDeviceProfile, (4) FrameAdvanceReader, or other u...Show more Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the (1) Start, (2) ChangeControlLocalName, (3) DeleteDeviceProfile, (4) FrameAdvanceReader, or other unknown method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control.Show less
CVE-2014-3912 1Samsung 1Ipolis Device Manager May 6, 2026 Jun 5, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in Samsung iPOLiS Device Manager before 1.8.7 allows remote attackers to execute arbi...Show more Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in Samsung iPOLiS Device Manager before 1.8.7 allows remote attackers to execute arbitrary code via a long value.Show less
CVE-2012-6429 1Samsung 1Kies May 6, 2026 Apr 4, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7 allows remote attackers to execute arbitrary code via a long string to the password argument.
CVE-2013-3964 1Samsung 2Shr 5082 Shr 5162 Apr 29, 2026 Oct 1, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Samsung SHR-5162, SHR-5082, and possibly other models, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
CVE-2013-3586 1Samsung 2Dvr Smart Viewer Apr 29, 2026 Aug 28, 2013 N/A· v4 N/A· v3 7.6 HIGH· v2 Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie.

Previous 1...73 747576 77 Next