Security Vulnerabilities - CVEs Published In February 2025
Improper privilege management in Samsung Find prior to SMR Feb-2025 Release 1 allows local privileged attackers to disable Samsung Find.
CVSS Score
6.0
EPSS Score
0.001
Published
2025-02-04
Improper control of generation of code in the sourcerer extension for Joomla in versions before 11.0.0 lead to a remote code execution vulnerability.
CVSS Score
9.8
EPSS Score
0.008
Published
2025-02-04
Improper handling of input variables lead to multiple path traversal vulnerabilities in the Admiror Gallery extension for Joomla in version branch 4.x.
CVSS Score
7.5
EPSS Score
0.005
Published
2025-02-04
Improper input validation in Samsung Members prior to version 5.2.00.12 allows physical attackers to access data across multiple user profiles.
CVSS Score
4.6
EPSS Score
0.002
Published
2025-02-04
Out-of-bounds write in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to write out-of-bounds memory.
CVSS Score
6.3
EPSS Score
0.001
Published
2025-02-04
Out-of-bounds read in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to read out-of-bounds memory.
CVSS Score
4.4
EPSS Score
0.002
Published
2025-02-04
Out-of-bounds write in decoding frame buffer in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.
CVSS Score
7.0
EPSS Score
0.002
Published
2025-02-04
Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability.
CVSS Score
5.3
EPSS Score
0.001
Published
2025-02-04
Protection Mechanism Failure in bootloader prior to SMR Jan-2025 Release 1 allows physical attackers to allow to execute fastboot command. User interaction is required for triggering this vulnerability.
CVSS Score
5.9
EPSS Score
0.002
Published
2025-02-04
Improper access control in NotificationManager prior to SMR Jan-2025 Release 1 allows local attackers to change the configuration of notifications.
CVSS Score
5.1
EPSS Score
0.001
Published
2025-02-04