Threat database

777 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 13%	CVE-2025-54439MagicINFO 9 Server · Unrestricted Upload of File with Dangerous Type High8.8EPSS 13%2025-07-23CVE Database V5CVE-2025-54439 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 13%Vulnerability Samsung Electronics #cwe-434	CVE Database V5	2025-07-23
Critical	9.8	EPSS 0.7%	CVE-2025-54438MagicINFO 9 Server · Path Traversal Critical9.8EPSS 0.7%2025-07-23CVE Database V5CVE-2025-54438 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0 EPSS 0.7%Vulnerability Samsung Electronics #cwe-22	CVE Database V5	2025-07-23
Critical	9.8	EPSS 0.7%	CVE-2025-54444MagicINFO 9 Server · Unrestricted Upload of File with Dangerous Type Critical9.8EPSS 0.7%2025-07-23CVE Database V5CVE-2025-54444 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.7%Vulnerability Samsung Electronics #cwe-434	CVE Database V5	2025-07-23
Critical	9.8	EPSS 0.7%	CVE-2025-54443MagicINFO 9 Server · Path Traversal Critical9.8EPSS 0.7%2025-07-23CVE Database V5CVE-2025-54443 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0 EPSS 0.7%Vulnerability Samsung Electronics #cwe-22	CVE Database V5	2025-07-23
Critical	9.8	EPSS 0.6%	CVE-2025-54442MagicINFO 9 Server · Unrestricted Upload of File with Dangerous Type Critical9.8EPSS 0.6%2025-07-23CVE Database V5CVE-2025-54442 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.6%Vulnerability Samsung Electronics #cwe-434	CVE Database V5	2025-07-23
High	8.8	EPSS 15%	CVE-2025-54441MagicINFO 9 Server · Unrestricted Upload of File with Dangerous Type High8.8EPSS 15%2025-07-23CVE Database V5CVE-2025-54441 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 15%Vulnerability Samsung Electronics #cwe-434	CVE Database V5	2025-07-23
Critical	9.8	EPSS 0.6%	CVE-2025-54440MagicINFO 9 Server · Unrestricted Upload of File with Dangerous Type Critical9.8EPSS 0.6%2025-07-23CVE Database V5CVE-2025-54440 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.6%Vulnerability Samsung Electronics #cwe-434	CVE Database V5	2025-07-23
High	8.1	EPSS 0.6%	CVE-2025-54447MagicINFO 9 Server · Unrestricted Upload of File with Dangerous Type High8.1EPSS 0.6%2025-07-23CVE Database V5CVE-2025-54447 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.6%Vulnerability Samsung Electronics #cwe-434	CVE Database V5	2025-07-23
Critical	9.8	EPSS 0.7%	CVE-2025-54446MagicINFO 9 Server · Path Traversal Critical9.8EPSS 0.7%2025-07-23CVE Database V5CVE-2025-54446 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0 EPSS 0.7%Vulnerability Samsung Electronics #cwe-22	CVE Database V5	2025-07-23
High	8.2	EPSS 17%	CVE-2025-54445MagicINFO 9 Server · Improper Restriction of XML External Entity Reference High8.2EPSS 17%2025-07-23CVE Database V5CVE-2025-54445 Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request Forgery.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 17%Vulnerability Samsung Electronics #cwe-611	CVE Database V5	2025-07-23
Critical	9.8	EPSS 0.7%	CVE-2025-54448MagicINFO 9 Server · Unrestricted Upload of File with Dangerous Type Critical9.8EPSS 0.7%2025-07-23CVE Database V5CVE-2025-54448 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.7%Vulnerability Samsung Electronics #cwe-434	CVE Database V5	2025-07-23
High	8.8	EPSS 34%	CVE-2025-54453MagicINFO 9 Server · Path Traversal High8.8EPSS 34%2025-07-23CVE Database V5CVE-2025-54453 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 34%Vulnerability Samsung Electronics #cwe-22	CVE Database V5	2025-07-23
High	7.3	EPSS 0.5%	CVE-2025-54452MagicINFO 9 Server · Improper Authentication High7.3EPSS 0.5%2025-07-23CVE Database V5CVE-2025-54452 Improper Authentication vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.5%Vulnerability Samsung Electronics #cwe-287	CVE Database V5	2025-07-23
Critical	9.8	EPSS 0.8%	CVE-2025-54451MagicINFO 9 Server · Code Injection Critical9.8EPSS 0.8%2025-07-23CVE Database V5CVE-2025-54451 Improper Control of Generation of Code ('Code Injection') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.8%Vulnerability Samsung Electronics #cwe-94	CVE Database V5	2025-07-23
High	7.2	EPSS 0.7%	CVE-2025-54450MagicINFO 9 Server · Path Traversal High7.2EPSS 0.7%2025-07-23CVE Database V5CVE-2025-54450 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.7%Vulnerability Samsung Electronics #cwe-22	CVE Database V5	2025-07-23
Critical	9.8	EPSS 0.8%	CVE-2025-54449MagicINFO 9 Server · Unrestricted Upload of File with Dangerous Type Critical9.8EPSS 0.8%2025-07-23CVE Database V5CVE-2025-54449 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.8%Vulnerability Samsung Electronics #cwe-434	CVE Database V5	2025-07-23
Critical	9.1	EPSS 0.8%	CVE-2025-54455MagicINFO 9 Server · Use of Hard-coded Credentials Critical9.1EPSS 0.8%2025-07-23CVE Database V5CVE-2025-54455 Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.8%Vulnerability Samsung Electronics #cwe-798	CVE Database V5	2025-07-23
Critical	9.1	EPSS 0.8%	CVE-2025-54454MagicINFO 9 Server · Use of Hard-coded Credentials Critical9.1EPSS 0.8%2025-07-23CVE Database V5CVE-2025-54454 Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0. EPSS 0.8%Vulnerability Samsung Electronics #cwe-798	CVE Database V5	2025-07-23
Medium	4.8	EPSS 0.1%	CVE-2025-7884Control Center · Insufficient Verification of Data Authenticity Medium4.8EPSS 0.1%2025-07-20CVE Database V5CVE-2025-7884 A vulnerability classified as problematic was found in Eluktronics Control Center 5.23.51.41. Affected by this vulnerability is an unknown functionality of the component REG File Handler. The manipulation leads to insufficient verification of data authenticity. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. EPSS 0.1%Vulnerability Eluktronics	CVE Database V5	2025-07-20
High	8.5	EPSS 1.4%	CVE-2025-7883Control Center · Command Injection High8.5EPSS 1.4%2025-07-20CVE Database V5CVE-2025-7883 A vulnerability classified as critical has been found in Eluktronics Control Center 5.23.51.41. Affected is an unknown function of the file \AiStoneService\MyControlCenter\Command of the component Powershell Script Handler. The manipulation leads to command injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. EPSS 1.4%Vulnerability Eluktronics	CVE Database V5	2025-07-20

Showing 541–560 of 777 results