Korean Software

국산 SW 취약점

국산 제품의 CVE 는 NVD 에 분명히 있는데 한국어로 정리된 곳이 없습니다.담당자가 자사 스택의 취약점을 찾으려면 영문 NVD 를 벤더명으로 하나씩 검색해야 합니다.

벤더 11곳CVE 278건이 중 악용 확인 1건

추적 벤더11곳

수집된 CVE278건

악용이 확인된 것1건CISA KEV 등재

공개 CVE 0건인 벤더3곳없다는 뜻이 아니라 공개되지 않았다는 뜻

전체 삼성전자 200 한글과컴퓨터 24 네이버 18 안랩 17 카카오 8 LG전자 8 엔씨소프트 2 티맥스소프트 1

삼성전자 — 수집 근거

영문 표기Samsung

분류단말·가전

검색 키워드Samsung

수집된 CVE200

대부분 갤럭시 단말·Exynos·MagicINFO 다. 건수가 많은 것은 월간 보안 공지 때문이며 제품이 더 위험하다는 뜻이 아니다. **삼성SDS 와는 다른 회사다.**

공급사 사이트 ›

삼성전자 관련 CVE

악용이 확인된 것을 먼저 보여줍니다.

● 실제 악용이 확인됨CVE-2019-16256삼성전자Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, whi…4.9%심각9.8● 국산 제품 관련CVE-2019-6335삼성전자A potential security vulnerability has been identified with Samsung Laser Printers. This vulner…높음7.5● 국산 제품 관련CVE-2019-11341삼성전자On certain Samsung P(9.0) phones, an attacker with physical access can start a TCP Dump capture…보통4.6● 국산 제품 관련CVE-2019-16253삼성전자The Text-to-speech Engine (aka SamsungTTS) application before 3.0.02.7 and 3.0.00.101 for Andro…높음7.8● 국산 제품 관련CVE-2019-14783삼성전자On Samsung mobile devices with N(7.x), and O(8.x), P(9.0) software, FotaAgent allows a maliciou…보통5.5● 국산 제품 관련CVE-2018-20135삼성전자Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing…높음8.1● 국산 제품 관련CVE-2019-6742삼성전자This vulnerability allows remote attackers to execute arbitrary code on vulnerable installation…심각9.8● 국산 제품 관련CVE-2019-6741삼성전자This vulnerability allows remote attackers to execute arbitrary code on vulnerable installation…심각9.3

전체 목록

150건

CVE-2019-6740This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Ga…높음8.8

CVE-2019-12315Samsung SCX-824 printers allow a reflected Cross-Site-Scripting (XSS) vulnerability that can be triggered by u…보통6.1

CVE-2019-12087Samsung S9+, S10, and XCover 4 P(9.0) devices can become temporarily inoperable because of an unprotected inte…보통5.5

CVE-2019-7421XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginVi…보통6.1

CVE-2019-7420XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/infor…보통6.1

CVE-2019-7419XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in …보통6.1

CVE-2019-7418XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/swsAlert.sws" in …보통6.1

CVE-2018-14745Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FX…높음8.8

CVE-2018-14856Buffer overflow in dhd_bus_flow_ring_create_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmd…보통6.3

CVE-2018-14855Buffer overflow in dhd_bus_flow_ring_flush_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdh…보통6.3

CVE-2018-14854Buffer overflow in dhd_bus_flow_ring_delete_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmd…보통6.3

CVE-2018-14853A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in t…보통4.3

CVE-2018-14852Out-of-bounds array access in dhd_rx_frame in drivers/net/wireless/bcmdhd4358/dhd_linux.c in the bcmdhd4358 Wi…보통6.3

CVE-2018-12038An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encr…보통4.2

CVE-2018-12037An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode, not vulnerable in "TC…보통4.0

CVE-2018-17969Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via…심각9.8

CVE-2018-14318This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Ga…높음8.8

CVE-2018-11614This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Membe…높음8.8

CVE-2018-10502This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy…높음7.8

CVE-2018-10501This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes …높음7.0

CVE-2018-10500This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy…높음7.0

CVE-2018-10499This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Samsung Gal…높음7.0

CVE-2018-10498This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Sam…보통5.5

CVE-2018-10497This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Email …높음7.8

CVE-2018-10496This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung In…높음8.8

CVE-2018-3915An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the vid…높음8.2

CVE-2018-3914An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the vid…높음7.8

CVE-2018-3913An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the vid…보통6.7

CVE-2018-3906An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-…높음8.2

CVE-2018-3894An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP se…높음8.8

CVE-2018-3877An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of …심각9.9

CVE-2018-3876An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of …높음8.8

CVE-2018-3874An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of …심각9.9

CVE-2018-3873An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of …심각9.9

CVE-2018-3865An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP serve…높음8.8

CVE-2018-3864An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP serve…높음8.8

CVE-2018-3875An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of …심각9.9

CVE-2018-3897An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP s…높음8.8

CVE-2018-3896An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP s…높음8.8

CVE-2018-3916An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the vid…높음7.8

CVE-2018-3908An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings …높음7.5

CVE-2018-3895An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP se…높음8.8

CVE-2018-3926An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore bin…보통5.5

CVE-2018-3927An exploitable information disclosure vulnerability exists in the crash handler of the hubCore binary of the S…보통5.9

CVE-2018-3918An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware ve…높음7.5

CVE-2018-3904An exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server…심각9.9

CVE-2018-3893An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP se…높음8.8

CVE-2018-3909An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings …높음8.6

CVE-2018-3907An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings …심각10.0

CVE-2018-3911An exploitable HTTP header injection vulnerability exists in the remote servers of Samsung SmartThings Hub STH…높음8.6

CVE-2018-3880An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionali…심각9.9

CVE-2018-3872An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of …심각9.9

CVE-2018-3866An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server…심각9.9

CVE-2018-3856An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH…심각9.9

CVE-2018-3912On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurel…높음7.8

CVE-2018-3925An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTT…심각9.9

CVE-2018-3919An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-c…심각9.9

CVE-2018-3917On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurel…심각9.9

CVE-2018-3905An exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core's HTTP server…심각9.9

CVE-2018-3903On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrect…심각9.9

CVE-2018-3902An exploitable buffer overflow vulnerability exists in the camera "replace" feature of video-core's HTTP serve…심각9.9

CVE-2018-3879An exploitable JSON injection vulnerability exists in the credentials handler of video-core's HTTP server of S…높음8.8

CVE-2018-3878Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP ser…심각9.9

CVE-2018-3867An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification o…심각9.9

CVE-2018-3863On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrect…심각9.9

CVE-2018-14908Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.applicati…높음8.8

CVE-2018-14904Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several paramet…보통6.1

CVE-2018-11689Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS vi…보통6.1

CVE-2018-10751A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the…보통5.3

CVE-2018-9143On Samsung mobile devices with M(6.0) and N(7.x) software, a heap overflow in the sensorhub binder service lea…심각9.8

CVE-2018-9142On Samsung mobile devices with N(7.x) software, attackers can install an arbitrary APK in the Secure Folder SD…높음7.0

CVE-2018-9141On Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software, Gallery allows remote attackers to execute…높음7.8

CVE-2018-9140On Samsung mobile devices with M(6.0) software, the Email application allows XSS via an event attribute and ar…보통6.1

CVE-2018-9139On Samsung mobile devices with N(7.x) software, a buffer overflow in the vision service allows code execution …심각9.8

CVE-2018-6019Samsung Display Solutions App before 3.02 for Android allows man-in-the-middle attackers to spoof B2B content …보통5.9

CVE-2017-10963In Knox SDS IAM (Identity Access Management) and EMM (Enterprise Mobility Management) 16.11 on Samsung mobile …보통5.9

CVE-2017-17860In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's lin…보통5.7

CVE-2018-5210On Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a Trustlet stack ove…높음8.1

CVE-2017-18020On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute …높음8.4

CVE-2015-7889The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak per…보통5.5

CVE-2017-17859Samsung Internet Browser 6.2.01.12 allows remote attackers to bypass the Same Origin Policy, and conduct UXSS …보통6.1

CVE-2017-17692Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitiv…높음7.5

CVE-2015-7268Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when used…보통4.2

CVE-2015-7267Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when in s…보통4.2

CVE-2017-16524Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'net…높음8.8

CVE-2014-0997WiFiMonitor in Android 4.4.4 as used in the Nexus 5 and 4, Android 4.2.2 as used in the LG D806, Android 4.2.2…높음7.5

CVE-2017-14262On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account via certain szU…높음8.1

CVE-2015-7896LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of serv…보통6.5

CVE-2015-1801The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers t…심각9.8

CVE-2015-1800The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers t…높음7.5

CVE-2015-7894The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1…높음8.8

CVE-2015-7891Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devi…높음7.0

CVE-2015-7898Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).보통5.5

CVE-2015-7895Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).보통5.5

CVE-2017-3218Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.…높음8.8

CVE-2015-7888Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 al…높음7.5

CVE-2015-5473Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete…심각9.8

CVE-2017-7978Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to obtain sensitive infor…높음7.5

CVE-2016-4032Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build…보통4.6

CVE-2016-4031Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build…보통6.8

CVE-2016-4030Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build…보통6.8

CVE-2016-2567secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FX…낮음3.3

CVE-2016-2566Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081.심각9.8

CVE-2016-2565Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to read sent e-mail …낮음3.3

CVE-2016-2036The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N900…보통5.5

CVE-2015-8780Samsung wssyncmlnps before 2015-10-31 allows directory traversal in a Kies restore, aka ZipFury.보통6.4

CVE-2015-7893SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbit…높음8.8

CVE-2015-0864Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 allows man-in-the-middle atta…높음8.0

CVE-2015-0863GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps) before 14120405.03.012 all…높음8.0

CVE-2015-5729The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW pr…심각9.8

CVE-2017-5538The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with…심각9.8

CVE-2016-4547Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (syst…높음7.5

CVE-2016-4546Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm…보통5.5

CVE-2016-4038Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media…높음7.8

CVE-2016-6604NULL pointer dereference in Samsung Exynos fimg2d driver for Android L(5.0/5.1) and M(6.0) allows attackers to…심각9.8

CVE-2016-3996ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller, which allows local users …보통5.5

CVE-2016-1920Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-midd…보통5.5

CVE-2016-1919Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtai…보통4.7

CVE-2016-9279Use-after-free vulnerability in the Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 c…높음7.5

CVE-2016-9278The Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows local users to ca…보통5.5

CVE-2016-6527The SmartCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows at…높음7.8

CVE-2016-6526The SpamCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows att…높음7.8

CVE-2017-5351Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by crea…높음7.5

CVE-2017-5350Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leverag…높음7.5

CVE-2017-5217Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L(5.0/5.1), …보통5.5

CVE-2016-6910The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for th…보통5.5

CVE-2016-9967Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices wi…심각9.8

CVE-2016-9966Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices wi…심각9.8

CVE-2016-9965Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices wi…심각9.8

CVE-2016-9567The mDNIe system service on Samsung Mobile S7 devices with M(6.0) software does not properly restrict setmDNIe…보통5.5

CVE-2016-9277Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a den…높음7.5

CVE-2016-7160A vulnerability on Samsung Mobile M(6.0) devices exists because external access to SystemUI activities is not …높음7.5

CVE-2016-7991On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP me…높음7.5

CVE-2016-7990On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing …심각9.8

CVE-2016-7989On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotel…높음7.5

CVE-2016-7988On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handl…높음7.5

CVE-2015-8281Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows attackers to bypass filesystem encryption via XOR cal…높음7.5

CVE-2015-8280Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to discover credentials by reading d…높음7.5

CVE-2015-8279Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a reques…높음8.6

CVE-2015-7897The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6…높음7.5

CVE-2015-8040The rtsp_getdlsendtime method in the CNC_Ctrl control in Samsung SmartViewer allows remote attackers to execut…보통6.8

CVE-2015-8039Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSe…보통6.8

NVD 키워드 검색 결과입니다. 검색어와 회사의 연결은 사람이 손으로 채웠고, 추론하지 않았습니다.

🔍 공개 CVE 를 찾지 못한 벤더

0건은 '안전하다' 가 아닙니다.

넥슨가비아더존비즈온

국내 ERP·그룹웨어처럼 점유율이 높은 제품인데도 공개 CVE 가 0건인 경우가 있습니다 — 취약점이 없어서가 아니라 CVE 로 공개되지 않기 때문입니다. 이 목록을 지우지 않고 남겨 두는 이유입니다 — 지우면 다음 사람이 다시 넣고 또 0건을 확인합니다.

건수가 곧 위험도가 아닙니다. 삼성전자가 가장 많은 것은 제품이 더 위험해서가 아니라 갤럭시 단말 월간 보안 공지가 CVE 를 대량 발행하기 때문입니다. 또한 삼성전자와 삼성SDS 는 다른 회사이고, LG 는 전자·유플러스·CNS 가 각각 다릅니다 — 회사와 검색어의 연결은 추론하지 않고 사람이 확인해 채웁니다.