Samsung

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-7447 2Canonical Samsung 2Ubuntu Linux X14j Firmware May 6, 2026 Feb 17, 2016 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers...Show more Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation.Show less
CVE-2016-1319 4Samsung SunZyxel+1 more 4Gs1900 10hp Firmware Keymouse FirmwareOpensolaris+1 more May 6, 2026 Feb 9, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express...Show more Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); and Unity Connection 10.5(2) store a cleartext encryption key, which allows local users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuv85958.Show less
CVE-2016-1308 1Samsung 1X14j Firmware May 6, 2026 Feb 7, 2016 N/A· v4 6.5 MEDIUM· v3 6.5 MEDIUM· v2 SQL injection vulnerability in Cisco Unified Communications Manager 10.5(2.13900.9) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227.
CVE-2016-1302 5Cisco SamsungSun+2 more 5Gs1900 10hp Firmware Keymouse FirmwareNx Os+2 more May 6, 2026 Feb 7, 2016 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h) and 11.1 before 11.1(1j) allow remote a...Show more Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h) and 11.1 before 11.1(1j) allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka Bug ID CSCut12998.Show less
CVE-2015-8281 1Samsung 1Web Viewer May 6, 2026 Jan 15, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows attackers to bypass filesystem encryption via XOR calculations.
CVE-2015-8280 1Samsung 1Web Viewer May 6, 2026 Jan 15, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to discover credentials by reading detailed error messages.
CVE-2015-8279 1Samsung 1Web Viewer May 6, 2026 Jan 15, 2016 N/A· v4 8.6 HIGH· v3 5.0 MEDIUM· v2 Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script.
CVE-2015-7897 1Samsung 1Galaxy S6 May 6, 2026 Nov 16, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 allows remote attackers to gain privileges or cause a denial of service (memory cor...Show more The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 allows remote attackers to gain privileges or cause a denial of service (memory corruption) via a crafted BMP image file.Show less
CVE-2015-8040 1Samsung 1Smartviewer May 6, 2026 Nov 2, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The rtsp_getdlsendtime method in the CNC_Ctrl control in Samsung SmartViewer allows remote attackers to execute arbitrary code via an index value.
CVE-2015-8039 1Samsung 1Smartviewer May 6, 2026 Nov 2, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSetupSave method in the STWAxConfig control or (2) SendCustomPacket method in the STWAxConfigNVR control, which...Show more Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSetupSave method in the STWAxConfig control or (2) SendCustomPacket method in the STWAxConfigNVR control, which trigger an untrusted pointer dereference.Show less
CVE-2015-4034 1Samsung 1Galaxy S5 May 6, 2026 Jul 6, 2015 N/A· v4 N/A· v3 7.9 HIGH· v2 The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung Galaxy S5s allows remote attackers to execute arbitrary files via a crafted Parcelable object in a serialized MethodSpec obj...Show more The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung Galaxy S5s allows remote attackers to execute arbitrary files via a crafted Parcelable object in a serialized MethodSpec object.Show less
CVE-2015-4033 1Samsung 1S Beam May 6, 2026 Jul 6, 2015 N/A· v4 N/A· v3 3.3 LOW· v2 Samsung SBeam allows remote attackers to read arbitrary images by leveraging an NFC connection to access the HTTP server on port 15000.
CVE-2015-3435 1Samsung 1Samsung Security Manager May 6, 2026 May 1, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 Samsung Security Manager (SSM) before 1.31 allows remote attackers to execute arbitrary code by uploading a file with an HTTP (1) PUT or (2) MOVE request.
CVE-2015-0555 1Samsung 1Ipolis Device Manager May 6, 2026 Feb 24, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the (1) ReadConfigVa...Show more Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the (1) ReadConfigValue or (2) WriteConfigValue function.Show less
CVE-2015-1499 1Samsung 1Samsung Security Manager May 6, 2026 Feb 16, 2015 N/A· v4 N/A· v3 8.5 HIGH· v2 The ActiveMQ Broker in Samsung Security Manager (SSM) before 1.31 allows remote attackers to delete arbitrary files, and consequently cause a denial of service, via a DELETE request.
CVE-2014-9266 1Samsung 1Smart Viewer May 6, 2026 Dec 8, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The STWConfig ActiveX control in Samsung SmartViewer does not properly initialize a variable, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2014-9265 1Samsung 1Smartviewer May 6, 2026 Dec 8, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in the BackupToAvi method in the CNC_Ctrl ActiveX control in Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2014-8346 1Samsung 2Findmymobile Mobile May 6, 2026 Oct 24, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service (screen locking with a...Show more The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service (screen locking with an arbitrary code) by triggering unexpected Find My Mobile network traffic.Show less
CVE-2014-3911 1Samsung 1Ipolis Device Manager May 6, 2026 Jun 11, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the (1) Start, (2) ChangeControlLocalName, (3) DeleteDeviceProfile, (4) FrameAdvanceReader, or other u...Show more Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the (1) Start, (2) ChangeControlLocalName, (3) DeleteDeviceProfile, (4) FrameAdvanceReader, or other unknown method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control.Show less
CVE-2014-3912 1Samsung 1Ipolis Device Manager May 6, 2026 Jun 5, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in Samsung iPOLiS Device Manager before 1.8.7 allows remote attackers to execute arbi...Show more Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in Samsung iPOLiS Device Manager before 1.8.7 allows remote attackers to execute arbitrary code via a long value.Show less

Previous 1...74 757677 78 Next