Improper Input Validation in xdLocalStorage

An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the...

CVE-2021-25517

An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution...

CVE-2021-25517

CVE-2021-25517 affects Samsung LDFW firmware prior to SMR Dec-2021 Release 1. The vulnerability arises from improper input validation in LDFW, enabling arbitrary code execution on affected devices. Documented impact includes remote/local (depending on context) execution with high severity (CVSS v...

CVE-2021-37081

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to nearby crash...

CVE-2021-37079

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete arbitrary file by systemapp permission...

CVE-2021-37094

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system denial of service...

CVE-2021-37096

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to user privacy disclosed...

CVE-2021-37094

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system denial of service...

CVE-2021-37096

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to user privacy disclosed...

CVE-2021-37084

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages...

CVE-2021-37081

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to nearby crash...

CVE-2021-37048

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,play a video,etc...

CVE-2021-37060

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to SAMGR Heap Address Leakage...

CVE-2021-37048

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,play a video,etc...

CVE-2021-37060

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to SAMGR Heap Address Leakage...

CVE-2021-37048

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,play a video,etc...

CVE-2021-37084

CVE-2021-37084 concerns Huawei HarmonyOS components with an input validation error that can allow a remote attacker to misuse the Smart Assistant via text messages. Multiple connected sources identify Huawei HarmonyOS as the affected platform and describe the vulnerability as an input validation ...

CVE-2021-37081

CVE-2021-37081 affects Huawei HarmonyOS and is described as an input validation error. Multiple connected sources (NVD/NVD-derived entries, CNVD, ENISA EUVD, Red Hat) confirm that the vulnerability stems from improper input validation and can lead to a crash of the impacted component or system. T...

CVE-2021-37079

CVE-2021-37079 affects Huawei Smartphone with an Improper Input Validation vulnerability. The issue allows deletion of arbitrary files by code running under the system_app permission. Root cause is input validation weakness in a component of Huawei Smartphone; impact is high for integrity and ava...

CVE-2021-37060

CVE-2021-37060 affects Huawei HarmonyOS / Huawei smartphones, caused by improper input validation in a SAMGR component, leading to potential heap address leakage. Public details in connected sources confirm the vulnerability class and impact but do not provide affected versions, exploit details, ...