Browse CVEs

HIGH 8.8 CVE-2018-3895 An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH… Sth Eth 250 Firmware No fix yet Fix from $1,9502018-08-28 HIGH 7.5 CVE-2018-3908 An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.1… Sth Eth 250 Firmware No fix yet Fix from $1,9502018-08-28 MEDIUM 5.5 CVE-2018-3926 An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of the Samsung SmartThings Hub STH-… Sth Eth 250 Firmware No fix yet Fix from $1,6002018-08-28 CRITICAL 9.9 CVE-2018-3904 An exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-27 HIGH 7.5 CVE-2018-3918 An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process list… Sth Eth 250 Firmware No fix yet Fix from $1,9502018-08-27 MEDIUM 5.9 CVE-2018-3927 An exploitable information disclosure vulnerability exists in the crash handler of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Fi… Sth Eth 250 Firmware No fix yet Fix from $1,6002018-08-27 HIGH 8.8 CVE-2018-3893 An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH… Sth Eth 250 Firmware No fix yet Fix from $1,9502018-08-27 CRITICAL 10.0 CVE-2018-3907 An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20… Sth Eth 250 Firmware Mitigation only Fix from $2,3002018-08-24 HIGH 8.6 CVE-2018-3909 An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20… Sth Eth 250 Firmware No fix yet Fix from $1,9502018-08-24 CRITICAL 9.9 CVE-2018-3856 An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. Th… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 CRITICAL 9.9 CVE-2018-3866 An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 CRITICAL 9.9 CVE-2018-3872 An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - F… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 CRITICAL 9.9 CVE-2018-3880 An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of video-core's HTTP server of Samsu… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 HIGH 8.6 CVE-2018-3911 An exploitable HTTP header injection vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. Th… Sth Eth 250 Firmware No fix yet Fix from $1,9502018-08-23 HIGH 7.8 CVE-2018-3912 On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" … Sth Eth 250 Firmware No fix yet Fix from $1,9502018-08-23 CRITICAL 9.9 CVE-2018-3902 An exploitable buffer overflow vulnerability exists in the camera "replace" feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-25… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 CRITICAL 9.9 CVE-2018-3903 On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controll… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 CRITICAL 9.9 CVE-2018-3905 An exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 CRITICAL 9.9 CVE-2018-3917 On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" … Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 CRITICAL 9.9 CVE-2018-3919 An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP server of Samsung SmartThing… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 CRITICAL 9.9 CVE-2018-3925 An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 CRITICAL 9.9 CVE-2018-3863 On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controll… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 CRITICAL 9.9 CVE-2018-3867 An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung S… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 CRITICAL 9.9 CVE-2018-3878 Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-… Sth Eth 250 Firmware No fix yet Fix from $2,3002018-08-23 HIGH 8.8 CVE-2018-3879 An exploitable JSON injection vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devi… Sth Eth 250 Firmware No fix yet Fix from $1,9502018-08-23 HIGH 8.8 CVE-2018-14908 Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printinformation/printReportSetupVie… Syncthru Web Service No fix yet Fix from $1,9502018-08-03 MEDIUM 6.1 CVE-2018-14904 Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as demonstrated by ruiFw_pid. Syncthru Web Service No fix yet Fix from $1,6002018-08-03 MEDIUM 5.3 CVE-2018-10751EPSS 9% A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Extension portion of the WbXml … Samsung Mobile No fix yet Fix from $1,6002018-05-29 CRITICAL 9.8 CVE-2018-9139 On Samsung mobile devices with N(7.x) software, a buffer overflow in the vision service allows code execution in a privileged process via a large fra… Samsung Mobile Mitigation only Fix from $2,3002018-03-30 CRITICAL 9.8 CVE-2018-9143 On Samsung mobile devices with M(6.0) and N(7.x) software, a heap overflow in the sensorhub binder service leads to code execution in a privileged pr… Samsung Mobile Mitigation only Fix from $2,3002018-03-30