Vulnerability index

Browse CVEs

1,202 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Galaxy S6 Firmware CRITICAL 9.8
CVE-2016-2566

Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081.

Mitigation only
Fix from $2,300 2017-04-13
Galaxy S6 Firmware MEDIUM 6.8
CVE-2016-4030

Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I919…

No fix yet
Fix from $1,600 2017-04-13
Galaxy S6 Firmware MEDIUM 6.8
CVE-2016-4031

Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I919…

No fix yet
Fix from $1,600 2017-04-13
Galaxy S6 Firmware MEDIUM 5.5
CVE-2016-2036

The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G…

No fix yet
Fix from $1,600 2017-04-13
Kies MEDIUM 6.4
CVE-2015-8780

Samsung wssyncmlnps before 2015-10-31 allows directory traversal in a Kies restore, aka ZipFury.

Fix: after 2015-10-30
Fix from $1,600 2017-04-13
Galaxy S6 HIGH 8.8
CVE-2015-7893EPSS 7%

SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript.

No fix yet
Fix from $1,950 2017-04-11
Galaxy App HIGH 8.0
CVE-2015-0863

GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps) before 14120405.03.012 allows man-in-the-middle attackers to obta…

Mitigation only
Fix from $1,950 2017-03-27
Galaxy App HIGH 8.0
CVE-2015-0864

Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 allows man-in-the-middle attackers to obtain sensitive information a…

Mitigation only
Fix from $1,950 2017-03-27
Nt14u Firmware CRITICAL 9.8
CVE-2015-5729

The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, whi…

No fix yet
Fix from $2,300 2017-03-23
Samsung Mobile CRITICAL 9.8
CVE-2017-5538

The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) and N(7.0) software and Exynos …

Patch available
Fix from $2,300 2017-03-23
Samsung Mobile HIGH 7.5
CVE-2016-4547

Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system call to …

Mitigation only
Fix from $1,950 2017-02-13
Samsung Mobile MEDIUM 5.5
CVE-2016-4546

Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service crash) via crafted data in a s…

Mitigation only
Fix from $1,600 2017-02-13
Samsung Mobile HIGH 7.8
CVE-2016-4038

Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sens…

Mitigation only
Fix from $1,950 2017-02-01
Exynos Fimg2d CRITICAL 9.8
CVE-2016-6604

NULL pointer dereference in Samsung Exynos fimg2d driver for Android L(5.0/5.1) and M(6.0) allows attackers to have unspecified impact via unknown ve…

Mitigation only
Fix from $2,300 2017-01-30
Knox MEDIUM 5.5
CVE-2016-1920

Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attacks as demonstrated by installin…

Mitigation only
Fix from $1,600 2017-01-27
Knox MEDIUM 5.5
CVE-2016-3996

ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller, which allows local users to read KNOX clipboard data via a craft…

No fix yet
Fix from $1,600 2017-01-27
Exynos Fimg2d Driver HIGH 7.5
CVE-2016-9279

Use-after-free vulnerability in the Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows attackers to obtain sens…

Mitigation only
Fix from $1,950 2017-01-18
Exynos Fimg2d Driver MEDIUM 5.5
CVE-2016-9278

The Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows local users to cause a denial of service (kernel panic) …

Mitigation only
Fix from $1,600 2017-01-18
Samsung Mobile HIGH 7.8
CVE-2016-6526

The SpamCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (cr…

Mitigation only
Fix from $1,950 2017-01-18
Samsung Mobile HIGH 7.8
CVE-2016-6527

The SmartCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (c…

Mitigation only
Fix from $1,950 2017-01-18
Samsung Mobile HIGH 7.5
CVE-2017-5350

Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handling. The …

Mitigation only
Fix from $1,950 2017-01-12
Samsung Mobile HIGH 7.5
CVE-2017-5351

Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large number of act…

Mitigation only
Fix from $1,950 2017-01-12
Samsung Mobile MEDIUM 5.5
CVE-2017-5217

Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L(5.0/5.1), and M(6.0) software can continually cra…

Mitigation only
Fix from $1,600 2017-01-09
Samsung Mobile CRITICAL 9.8
CVE-2016-9965

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) softw…

Mitigation only
Fix from $2,300 2016-12-16
Samsung Mobile CRITICAL 9.8
CVE-2016-9966

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) softw…

Mitigation only
Fix from $2,300 2016-12-16
Samsung Mobile CRITICAL 9.8
CVE-2016-9967

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) softw…

Mitigation only
Fix from $2,300 2016-12-16
Samsung Mobile MEDIUM 5.5
CVE-2016-9567

The mDNIe system service on Samsung Mobile S7 devices with M(6.0) software does not properly restrict setmDNIeScreenCurtain API calls, enabling attac…

Mitigation only
Fix from $1,600 2016-11-23
Samsung Mobile HIGH 7.5
CVE-2016-9277

Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of service (UI restart) via vectors…

Mitigation only
Fix from $1,950 2016-11-11
Samsung Mobile HIGH 7.5
CVE-2016-7160

A vulnerability on Samsung Mobile M(6.0) devices exists because external access to SystemUI activities is not properly restricted, leading to a Syste…

Mitigation only
Fix from $1,950 2016-11-03
X14j Firmware CRITICAL 9.8
CVE-2016-1329

Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardc…

Fix: 2.50+
Fix from $2,300 2016-03-03