7083 matches found
CVE-2022-44549
The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing APIs without authorization, affecting user confidentiality...
CVE-2022-44553
The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically...
Denial of service
The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically...
Design/Logic Flaw
The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction...
CVE-2022-44561
The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction...
CVE-2022-44553
The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically...
CVE-2022-44549
The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing APIs without authorization, affecting user confidentiality...
PT-2022-5646
Name of the Vulnerable Software and Affected Versions Microsoft Office versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Description The issue exists due to insufficient input validation in Microsoft Office and Microsoft 365 Apps f...
PT-2022-27238 · Hiview · Hiview
Name of the Vulnerable Software and Affected Versions: HiView module affected versions not specified Description: The HiView module has a vulnerability where it fails to filter out third-party apps when invoking the system provider. This could lead to third-party apps starting periodically if the...
CVE-2022-44561
CVE-2022-44561 involves a permission verification flaw in the preset launcher module that allows unauthorized apps to add arbitrary widgets and shortcuts without user interaction. Public sources (NVD/Red Hat/CVE lists) describe a HIGH severity (I=HIGH) with no interaction required. Connected docu...
CVE-2022-44553
The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically...
PT-2022-27247 · Unknown · Preset Launcher Module
Name of the Vulnerable Software and Affected Versions: Preset launcher module affected versions not specified Description: The preset launcher module has a permission verification issue. This allows unauthorized apps to add arbitrary widgets and shortcuts without any interaction. Recommendations:...
CVE-2022-44553
CVE-2022-44553 affects the HiView module in HarmonyOS. Root cause: the HiView module does not filter third‑party apps when invoking the system provider, enabling potential abuse. Impact: successful exploitation may cause third‑party apps to start periodically. CVSSv3.1 base score 5.3 (I: Low, A: ...
CVE-2022-44549
CVE-2022-44549 concerns Huawei HarmonyOS’ LBS module, specifically a vulnerability in the geofencing API access. The issue allows third‑party apps to access geofencing APIs without authorization, compromising user confidentiality. The NVD and related entries show a CVSS v3.1 base score of 7.5 (HI...
Mobile app usage soars but security still falls short
Benchmark analysis of mobile apps shows 99% have security or privacy vulnerabilities. These weaknesses can cause exposure of sensitive information and jeopardize brand reputation, customer trust and company value...
CVE-2022-27855
Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...
CVE-2022-27855
Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...
CVE-2022-27855
The CVE-2022-27855 CSRF vulnerability affects the Fatcat Apps Analytics Cat plugin for WordPress (versions ≤ 1.0.9). The issue allows an attacker to change plugin settings due to CSRF, enabling unintended configuration changes. Reported root cause is a cross-site request forgery flaw in plugin se...
