Threat database

413 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 1.0%	CVE-2025-34068WLAN AP WEA453e · Missing Authentication for Critical Function Critical9.3EPSS 1.0%2025-07-15CVE Database V5CVE-2025-34068 An unauthenticated remote command execution vulnerability exists in Samsung WLAN AP WEA453e firmware prior to version 5.2.4.T1 via improper input validation in the “Tech Support” diagnostic functionality. The command1 and command2 POST or GET parameters accept arbitrary shell commands that are executed with root privileges on the underlying operating system. An attacker can exploit this by crafting a request that injects shell commands to create output files in writable directories and then access their contents via the download endpoint. This flaw allows complete compromise of the device without authentication. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC. EPSS 1.0%Vulnerability Samsung Electronics #cwe-306 Germany+8	CVE Database V5	2025-07-15
Medium	5.5	EPSS 0.1%	CVE-2025-21009libsavsvc.so · Out-of-bounds Read Medium5.5EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21009 Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. EPSS 0.1%Vulnerability Samsung Mobile #cwe-125 Germany+7	CVE Database V5	2025-07-08
Medium	5.5	EPSS 0.1%	CVE-2025-21008libsavsvc.so · Out-of-bounds Read Medium5.5EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21008 Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. EPSS 0.1%Vulnerability Samsung Mobile #cwe-125 Germany+9	CVE Database V5	2025-07-08
Medium	5.5	EPSS 0.1%	CVE-2025-21007libsavsvc.so · Out-of-bounds Write Medium5.5EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21007 Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 Germany+7	CVE Database V5	2025-07-08
High	7.0	EPSS 0.1%	CVE-2025-21006libsavsvc.so · Out-of-bounds Write High7.0EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21006 Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 Germany+7	CVE Database V5	2025-07-08
Medium	5.5	EPSS 0.1%	CVE-2025-21005isemtelephony · Improper Access Control Medium5.5EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21005 Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-07-08
Medium	6.2	EPSS <0.1%	CVE-2025-21004Samsung Mobile Devices · Improper Access Control Medium6.2EPSS <0.1%2025-07-08CVE Database V5CVE-2025-21004 Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device. EPSS <0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-07-08
Medium	4.0	EPSS 0.1%	CVE-2025-21003Samsung Mobile Devices · Insecure Storage of Sensitive Information Medium4.0EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21003 Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-922 Germany+9	CVE Database V5	2025-07-08
Medium	6.2	EPSS 0.1%	CVE-2025-21002Samsung Mobile Devices · Improper Access Control Medium6.2EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21002 Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-07-08
Medium	6.2	EPSS 0.1%	CVE-2025-21001Samsung Mobile Devices · Improper Access Control Medium6.2EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21001 Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-07-08
Medium	6.2	EPSS 0.1%	CVE-2025-21000Samsung Mobile Devices · Improper Privilege Management Medium6.2EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21000 Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth. EPSS 0.1%Vulnerability Samsung Mobile #cwe-269 Germany+7	CVE Database V5	2025-07-08
Medium	4.1	EPSS 0.2%	CVE-2025-20999Samsung Mobile Devices · Improper Authorization Medium4.1EPSS 0.2%2025-07-08CVE Database V5CVE-2025-20999 Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password. EPSS 0.2%Vulnerability Samsung Mobile #cwe-285 Germany+9	CVE Database V5	2025-07-08
Medium	5.5	EPSS 0.1%	CVE-2025-20998Samsung Mobile Devices · Improper Access Control Medium5.5EPSS 0.1%2025-07-08CVE Database V5CVE-2025-20998 Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+7	CVE Database V5	2025-07-08
Medium	6.2	EPSS 0.1%	CVE-2025-20997Samsung Mobile Devices · Incorrect Default Permissions Medium6.2EPSS 0.1%2025-07-08CVE Database V5CVE-2025-20997 Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch. EPSS 0.1%Vulnerability Samsung Mobile #cwe-276 Germany+7	CVE Database V5	2025-07-08
Medium	6.4	EPSS 0.1%	CVE-2025-20983Samsung Mobile Devices · Out-of-bounds Write Medium6.4EPSS 0.1%2025-07-08CVE Database V5CVE-2025-20983 Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 United States+12	CVE Database V5	2025-07-08
Medium	6.4	EPSS 0.1%	CVE-2025-20982Samsung Mobile Devices · Out-of-bounds Write Medium6.4EPSS 0.1%2025-07-08CVE Database V5CVE-2025-20982 Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 United States+9	CVE Database V5	2025-07-08
Medium	5.1	EPSS 0.4%	CVE-2025-53074rLottie · Out-of-bounds Read Medium5.1EPSS 0.4%2025-06-30CVE Database V5CVE-2025-53074 Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2. EPSS 0.4%Vulnerability Samsung Open Source #cwe-125 Germany+7	CVE Database V5	2025-06-30
Medium	5.1	EPSS 0.4%	CVE-2025-53076rLottie · Improper Input Validation Medium5.1EPSS 0.4%2025-06-30CVE Database V5CVE-2025-53076 Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2. EPSS 0.4%Vulnerability Samsung Open Source #cwe-20 Germany+7	CVE Database V5	2025-06-30
Medium	4.6	EPSS 0.3%	CVE-2025-53075rLottie · Improper Input Validation Medium4.6EPSS 0.3%2025-06-30CVE Database V5CVE-2025-53075 Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2. EPSS 0.3%Vulnerability Samsung Open Source #cwe-20 Germany+7	CVE Database V5	2025-06-30
Medium	5.1	EPSS 0.5%	CVE-2025-0634rLottie · Use After Free Medium5.1EPSS 0.5%2025-06-30CVE Database V5CVE-2025-0634 Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2. EPSS 0.5%Vulnerability Samsung Open Source #cwe-416 Germany+6	CVE Database V5	2025-06-30

Showing 361–380 of 413 results