Authentication flaw

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

Authorization

There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI...

Design/Logic Flaw

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations.Affected product versions...

Authentication flaw

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

CVE-2020-1794

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

CVE-2020-1794

The CVE-2020-1794 entry pertains to an improper authentication vulnerability in Huawei smartphones where the applock fails to enforce sufficient authentication in certain scenarios, potentially allowing access to data from locked apps. Affected devices include Huawei Mate 20 (versions earlier tha...

CVE-2020-1796

There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI...

CVE-2020-1795

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations.Affected product versions...

CVE-2020-1795

The CVE-2020-1795 entry describes a logic-error vulnerability in Huawei smartphones (Mate 20 and Mate 30 Pro) where the Healthy Phone Use (Digital Balance) feature does not properly restrict certain operations, allowing bypass of the Digital Balance limit after a series of actions. Affected produ...

CVE-2018-20333

creationtimestamp| type| source ---|---|--- 2020-03-20 06:32:21+00:00| seen| https://t.me/cibsecurity/10643...

Huawei Mate 20 and Mate 30 Pro Logic Error Vulnerability

The Huawei Mate 20 and Mate 30 Pro are both smartphones from the Chinese company Huawei Huawei. A logic error vulnerability exists in Huawei Mate 20 before 10.0.0.188 C00E74R3P8 and Mate 30 Pro before 10.0.0.203 C00E202R7P2, which stems from the system's failure to reasonably restrict some...

Huawei Mate 20 and Mate 30 Pro License Issue Vulnerability (CNVD-2020-21998)

The Huawei Mate 20 and Mate 30 Pro are both smartphones from the Chinese company Huawei Huawei. An authorization issue vulnerability exists in Huawei Mate 20 before 10.0.0.188 C00E74R3P8 and Mate 30 Pro before 10.0.0.203 C00E202R7P2, which can be exploited by an attacker to gain access to data fr...

1kdigital.com Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8574 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting 1kdigital.com website and its users. Following coordinated...

jmcco.jp Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting jmcco.jp website and its users. Following coordinated and...

photoshoptuto.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1113793 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting photoshoptuto.com website...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit. Remediation A fix was pushed into the master branch but not yet published. References - Chromium Bugs - GitHub Commit...

Out-of-bounds

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

CVE-2019-10553

creationtimestamp| type| source ---|---|--- 2020-03-05 14:07:07+00:00| seen| https://t.me/cibsecurity/10306 2026-01-20 08:04:55+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2019-10554

creationtimestamp| type| source ---|---|--- 2020-03-05 14:07:06+00:00| seen| https://t.me/cibsecurity/10305 2026-01-20 08:04:55+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2019-10586

creationtimestamp| type| source ---|---|--- 2020-03-05 13:13:06+00:00| seen| https://t.me/cibsecurity/10302 2026-01-20 08:04:53+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...