CVE-2019-5308

Mate 20 RS smartphones with versions earlier than 9.1.0.135C786E133R3P1 have an improper authorization vulnerability. The software does not properly restrict certain operation in ADB mode, successful exploit could allow the attacker to switch to third desktop after a series of operation...

CVE-2019-5308

Mate 20 RS smartphones with versions earlier than 9.1.0.135C786E133R3P1 have an improper authorization vulnerability. The software does not properly restrict certain operation in ADB mode, successful exploit could allow the attacker to switch to third desktop after a series of operation...

CVE-2019-5269

Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious files and escalate privilege...

CVE-2019-5269

Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious files and escalate privilege...

CVE-2019-5269

CVE-2019-5269 affects Huawei home routers. The issue stems from improper authorization of certain programs, allowing an attacker to upload and execute malicious files and escalate privileges. Based on the provided documents, the vulnerability enables local access impact with high confidentiality,...

PT-2019-17571 · Huawei · Huawei Mate 20

Name of the Vulnerable Software and Affected Versions: Huawei Mate 20 RS versions prior to 9.1.0.135C786E133R3P1 Description: The issue is related to improper authorization in ADB mode, where the software does not properly restrict certain operations. A successful exploit could allow an attacker ...

CVE-2019-5269: Undefined Security Weakness

Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious files and escalate privilege...

CVE-2019-5308: Undefined Security Weakness

Mate 20 RS smartphones with versions earlier than 9.1.0.135C786E133R3P1 have an improper authorization vulnerability. The software does not properly restrict certain operation in ADB mode, successful exploit could allow the attacker to switch to third desktop after a series of operation...

Huawei Mate 20 RS Improper Authorization Vulnerability

Huawei Mate 20 RS is a smartphone from Chinese company Huawei Huawei. An improper authorization vulnerability exists in previous versions of Huawei Mate 20 RS 9.1.0.135 C786E133R3P1, which stems from the system's failure to appropriately restrict some of the user's actions in ADB mode. An attacke...

CVE-2019-15990

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An...

CVE-2019-15990: Improper Authorization

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An...

Cisco Small Business RV Series Routers Information Disclosure Vulnerability

Cisco Small Business RV Series Routers is an RV series router from Cisco USA. An information disclosure vulnerability exists in the Web management interface of Cisco Small Business RV Series Routers, which arises from a failure of the program to properly authorize HTTP requests, which can be...

PT-2019-7088

Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 3.2.0 Description The issue is related to the improper authorization of CA certificates for signing other certificates. Recommendations For versions prior to 3.2.0, update to version 3.2.0 or later to resolve the issu...

PT-2019-4422

Name of the Vulnerable Software and Affected Versions ThinPro Linux affected versions not specified Description The issue is related to improper authorization in the operating system. If a local user has been configured and logged in, an unauthenticated attacker with physical access may be able t...

PT-2019-4234

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV Series Routers affected versions not specified Cisco Small Business RV016 affected versions not specified Cisco Small Business RV042 affected versions not specified Cisco Small Business RV042G affected versions not...

Multiple Huawei Products Improperly Licensed Vulnerability

The Huawei HiRouter-CD15-10, among others, is a wireless router from the Chinese company Huawei Huawei. An improper authorization vulnerability exists in multiple Huawei products, which can be exploited by attackers to execute uploaded malicious files and elevate privileges...

Huawei P30 ELLE-AL00B Improper Authorization Vulnerability

Huawei P30 is a smartphone from Chinese company Huawei Huawei. An improper authorization vulnerability exists in versions prior to Huawei P30 ELLE-AL00B 9.1.0.186 C00E180R2P1, which stems from the system failing to properly authorize a user action. An attacker could use this vulnerability to flas...

CVE-2019-15358

The Dexp Z250 Android device with a build fingerprint of DEXP/Z250/Z250:8.1.0/O11019/1531130719:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system propert...

CVE-2019-15379: Undefined Security Weakness

The Walton Primo G3 Android device with a build fingerprint of WALTON/PrimoGM3/PrimoGM3:8.1.0/O11019/1522737198:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify ...

CVE-2019-5231

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186C00E180R2P1 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a user attempts to perform certain action. Successful exploit could allow the attacker to update a crafted package...