CVE-2023-44258

CVE-2023-44258 affects the WordPress plugin Schema App Structured Data for Schema.org (Schema App Structured Data) versions 1.23.1 and earlier. The root cause is Missing Authorization via page_init, i.e., broken access control that can permit unauthorized access to sensitive data. CVSS v3.1 base ...

CVE-2023-48775

CVE-2023-48775 affects the WordPress WP Cleanfix plugin, specifically versions through 5.6.2. The root cause is a Missing Authorization / Broken Access Control vulnerability in the plugin’s access checks, enabling exploitation due to incorrectly configured security levels. The CVSSv3.1 base score...

SUSE CVE-2024-56677

In the Linux kernel, the following vulnerability has been resolved: powerpc/fadump: Move fadumpcmainit to setuparch after initmeminit During early init CMAMINALIGNMENTBYTES can be PAGESIZE, since pageblockorder is still zero and it gets initialized later during initmeminit e.g. setuparch -...

SUSE CVE-2024-56699

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug slot In commit 6ee600bfbe0f "s390/pci: remove hotplug slot when releasing the device" the zpciexitslot was moved from zpcidevicereserved to zpcireleasedevice with the intention of...

DEBIAN-CVE-2024-56699

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug slot In commit 6ee600bfbe0f "s390/pci: remove hotplug slot when releasing the device" the zpciexitslot was moved from zpcidevicereserved to zpcireleasedevice with the intention of...

UBUNTU-CVE-2024-56699

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug slot In commit 6ee600bfbe0f "s390/pci: remove hotplug slot when releasing the device" the zpciexitslot was moved from zpcidevicereserved to zpcireleasedevice with the intention of...

CVE-2022-48470

CVE-2022-48470 affects Huawei HiLink AI Life; an identity authentication bypass could allow attackers to access restricted functions. This is associated with HWPSIRT-2022-42291. Documents identify the affected product and vulnerability class but do not provide explicit patch versions or detailed ...

CVE-2020-1824

CVE-2020-1824 is an OOB read vulnerability in Huawei devices' COPS protocol implementation. The issue stems from the decoding function processing incoming data packets, enabling an out-of-bounds read that may disrupt device service. The entry groups seven related CVEs (CVE-2020-1818 to CVE-2020-1...

CVE-2020-1820

CVE-2020-1820 is part of seven Huawei-related OOB read vulnerabilities in the COPS protocol implementation. The Huawei PSIRT advisory describes multiple decoding functions that may read beyond bounds when processing an incoming COPS data packet, potentially disrupting service on affected devices....

PT-2024-36985

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises during early initialization in the Linux kernel, specifically in the powerpc/fadump module. The problem occurs because CMA MIN ALIGNMENT BYTES can be PAGE SIZE during...

CVE-2020-9211

CVE-2020-9211 refers to an out-of-bounds read/write vulnerability in Huawei smartphones. The issue arises because a module does not sufficiently verify input, enabling denial of service through crafted configuration changes. Affected product: Huawei smartphone software; root cause: inadequate inp...

CVE-2020-9089

CVE-2020-9089 affects Huawei smartphones. The issue is that a function in a module can be called without verifying the caller’s access, enabling user‑level attackers to obtain information (information disclosure). CVSSv3.1 base score 3.3 (LOW); attack is LOCAL with LOW complexity and requires LOW...

CVE-2020-9086

Summary: CVE-2020-9086 describes a buffer error vulnerability in some Huawei products where an unauthenticated attacker can trigger a flaw by sending specially crafted UPnP messages to vulnerable devices, due to insufficient input validation. The consequence is a potential service abnormality, wi...

CVE-2020-9085

CVE-2020-9085 describes a NULL pointer dereference in some Huawei products. The issue arises from insufficient validation of parameters in specially crafted POST messages, allowing an attacker to trigger abnormal process behavior over the network (attack vector: NETWORK, UI: NONE, privileges: NON...

CVE-2020-9082

CVE-2020-9082 is described across multiple sources as an information-disclosure vulnerability in smartphones caused by a logic-judgment error that, if an attacker gains ADB access, enables operations on the device and access to data from apps protected by Applock. The core impact is information e...

CVE-2022-21505

In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...

CVE-2022-34159

CVE-2022-34159 concerns Huawei printer products. The supplied documentation identifies an input verification vulnerability in Huawei printers that could lead to device service exceptions (availability impact) when exploited, with CVSS 3.1 initial metrics indicating NETWORK attack vector and HIGH ...

CVE-2022-32203

CVE-2022-32203 describes a command-injection vulnerability in Huawei terminal printer products. The issue allows high-privilege code execution on the printer after exploitation over the network (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8). The root cause is described as insufficient...

CVE-2022-32144

CVE-2022-32144 concerns Huawei’s Huawei CV81-WDM FW with an Insufficient Input Validation vulnerability. The core issue is input validation failing in Huawei products, enabling potential network-based abuse that could cause service abnormality. CNVD/ CNNVD/PTSecurity references identify Huawei CV...

CVE-2020-9250

CVE-2020-9250 describes an insufficient authentication vulnerability in some Huawei smartphones (HWPSIRT-2019-12302). An unauthenticated, local attacker can craft a software package to exploit due to insufficient verification, potentially impacting the service. Affected product: Huawei smartphone...