Design/Logic Flaw

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations.Affected product versions...

Authentication flaw

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

Authorization

There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI...

Authentication flaw

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

CVE-2020-1794

The CVE-2020-1794 entry pertains to an improper authentication vulnerability in Huawei smartphones where the applock fails to enforce sufficient authentication in certain scenarios, potentially allowing access to data from locked apps. Affected devices include Huawei Mate 20 (versions earlier tha...

CVE-2020-1794

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

CVE-2020-1796

There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI...

CVE-2020-1795

The CVE-2020-1795 entry describes a logic-error vulnerability in Huawei smartphones (Mate 20 and Mate 30 Pro) where the Healthy Phone Use (Digital Balance) feature does not properly restrict certain operations, allowing bypass of the Digital Balance limit after a series of actions. Affected produ...

CVE-2020-1795

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations.Affected product versions...

[SECURITY] Fedora 30 Update: webkit2gtk3-2.28.0-5.fc30

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

Huawei Mate 20 and Mate 30 Pro Logic Error Vulnerability

The Huawei Mate 20 and Mate 30 Pro are both smartphones from the Chinese company Huawei Huawei. A logic error vulnerability exists in Huawei Mate 20 before 10.0.0.188 C00E74R3P8 and Mate 30 Pro before 10.0.0.203 C00E202R7P2, which stems from the system's failure to reasonably restrict some...

Systech NDS-5008 Cross-Site Scripting Vulnerability

The Systech NDS-5008 is a terminal server from Systech USA. A cross-site scripting vulnerability exists in the Systech NDS-5000 Terminal Server NDS/5008 8 Port, RJ45 using firmware version 02D.30. The vulnerability stems from the lack of proper validation of client data by the WEB application. An...

Huawei Mate 20 and Mate 30 Pro License Issue Vulnerability (CNVD-2020-21998)

The Huawei Mate 20 and Mate 30 Pro are both smartphones from the Chinese company Huawei Huawei. An authorization issue vulnerability exists in Huawei Mate 20 before 10.0.0.188 C00E74R3P8 and Mate 30 Pro before 10.0.0.203 C00E202R7P2, which can be exploited by an attacker to gain access to data fr...

Fedora 30 : weechat (2020-4d232b48b8)

New version, fixes a lot of bugs some of them security. In the same update, fixed up epel7 build to latest version as well. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean...

Fedora: Security Advisory for php-horde-Horde-Form (FEDORA-2020-a69f99bc67)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 30 : firefox (2020-4950a2c9c3)

New Firefox version 74.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 30 : python3-typed_ast (2020-9b3dabc21c)

Fixes for CVE-2019-19274 and CVE-2019-19275 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

[SECURITY] Fedora 30 Update: ansible-2.9.6-1.fc30

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

Fedora: Security Advisory for python3-typed_ast (FEDORA-2020-9b3dabc21c)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for firefox (FEDORA-2020-4950a2c9c3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...