Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2014-9265

Stack-based buffer overflow in the BackupToAvi method in the CNC_Ctrl ActiveX control in Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 6.8 Medium EPSS 4.0% KEV · Not listed
Vendors
Samsung
Products
Smartviewer
CVE-2015-8039

Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSetupSave method in the STWAxConfig control or (2) SendCustomPacket method in the STWAxConfigNVR control, which trigger an untrusted pointer dereference.

CVSS 2.0 · 6.8 Medium EPSS 3.9% KEV · Not listed
Vendors
Samsung
Products
Smartviewer
CVE-2015-8040

The rtsp_getdlsendtime method in the CNC_Ctrl control in Samsung SmartViewer allows remote attackers to execute arbitrary code via an index value.

CVSS 2.0 · 6.8 Medium EPSS 3.4% KEV · Not listed
Vendors
Samsung
Products
Smartviewer
CVE-2018-11689

Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 parameter. (The same Web Viewer codebase was transitioned from Samsung to Hanwha.)

CVSS 3.1 · 6.1 Medium EPSS 1.6% KEV · Not listed
Vendors
Hanwha-security Samsung
Products
Hrd-1641 Hrd-1641 Firmware Hrd-1642 and 16 more