CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- samsung android, samsung mobile secure folder +1 moreInsecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local...6.2 Medium
- samsung mobile s assistant, samsung sassistant +1 moreImproper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3...5.1 Medium
- samsung mobile s assistant, samsung sassistant +1 moreImproper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to...5.1 Medium
- samsung mobile s assistant, samsung sassistant +1 moreImproper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to...5.1 Medium
- samsung notes, samsung mobile samsungnotes +1 moreImproper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to...4.1 Medium
- samsung notesImproper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged...5.0 Medium
- samsung calendarImproper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01...4.6 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers...5.9 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to...6.8 Medium
- samsung mobile devicesImproper handling of insufficient permission in AppPrelaunchManagerService prior to SMR Sep-2025 Release 1 in Chinese Android 15 allows local attackers to execute arbitrary application in the backgrou…4.3 Medium
- samsung android, samsung mobile devices +1 moreImproper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local...5.5 Medium
- samsung android, samsung mobile devices +1 moreImproper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release...5.1 Medium
- samsung android, samsung mobile devices +1 moreImproper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local...5.1 Medium
- samsung android, samsung mobile devices +1 moreIntent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers...6.3 Medium
- maevelander sticky side buttonsSticky Side Buttons < 2.0.0 - Admin+ Stored XSS3.3 Low
- ntt east, inc. web caster v130Cross-site request forgery vulnerability exists in Web Caster V130 versions 1.08 and earlier. If...2.0 Low
- samsung galaxy storeImproper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local...6.4 Medium
- samsung cameraMissing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03...6.1 Medium
- samsung accountImproper URL input validation vulnerability in Samsung Account application prior to version 14.1...5.4 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in CertByte prior to SMR Apr-2023 Release 1 allows local...8.5 High
- samsung android, smart suggestions, samsung mobile devices +2 moreImproper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1...5.3 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows...6.0 Medium
- samsung android, samsung mobile devices +1 moreAccess of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr...7.9 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release...8.0 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release...8.0 High
- samsung android, samsung mobile devices +1 moreImproper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1...6.8 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1...6.8 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows...5.9 Medium
- samsung exynos, samsung mobile devices +1 moreError in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1...4.6 Medium
- samsung android, samsung mobile devices +1 morePendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023...5.3 Medium
- papercut print deployMisconfigured certificate validation with self-signed certificates for Print Deploy7.7 High
- openagentplatform diveDive's improper processing of custom urls can lead to Remote Code Execution8.8 High
- getoutline outlineOutline's Local File Storage Feature can Cause CSP Bypass6.8 Medium
- freescoutFreeScout's deserialization of untrusted data can lead to Remote Code Execution8.6 High
- codeastro real estate management systemScriptAndTools Real Estate Management System userlist.php redirect6.9 Medium
- codeastro real estate management systemScriptAndTools Real Estate Management System register.php unrestricted upload5.3 Medium
- carmelo fruit shop management systemcode-projects Fruit Shop Management System products.php cross site scripting5.1 Medium
- das parking management system 停车场管理系统, parking management system +1 moreDas Parking Management System 停车场管理系统 FindAll information disclosure6.9 Medium
- das parking management system 停车场管理系统, parking management system +1 moreDas Parking Management System 停车场管理系统 Search information disclosure6.9 Medium
- phpgurukul complaint management systemphpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin...8.8 High
- phpgurukul complaint management systemphpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting (XSS) in...7.2 High
- phpgurukul complaint management systemphpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-details...6.5 Medium
- phpgurukul online shopping portalphpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert...9.1 Critical
- Show moreLoading…