Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 23

Export CSV
CVE-2024-7399

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.

CVSS 3.1 · 8.8 High EPSS 91.9% KEV · Listed
Vendors
Samsung
Products
Magicinfo 9 Server
CVE-2026-25202

Hardcoded Database Credentials in MagicINFO 9 Server Allow Remote Administrative Access

The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21.1090.1.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Samsung Samsung Electronics
Products
Magicinfo 9 Server Magicinfo 9 Server
CVE-2026-25200

Stored XSS via Unrestricted HTML Upload in Samsung MagicINFO 9 Server

A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21.1090.1.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Samsung Samsung Electronics
Products
Magicinfo 9 Server Magicinfo 9 Server
CVE-2025-4632

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.

CVSS 3.1 · 9.8 Critical EPSS 22.4% KEV · Listed
Vendors
Samsung
Products
Magicinfo 9 Server