Design/Logic Flaw

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability...

CVE-2023-39383

CVE-2023-39383 relates to Huawei HarmonyOS: an input validation error in the AMS module where input parameters are not strictly verified. This could enable a security restriction bypass and potentially compromise apps’ data security. Documents do not specify exploited in the wild or available fix...

CVE-2023-39383

Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromise apps' data security...

CVE-2023-39383

Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromise apps' data security...

CVE-2023-39389

CVE-2023-39389 affects Huawei HarmonyOS PMS module. The flaw is an input parameter validation error in the PMS component, enabling an attacker to cause the home screen/desktop to become unavailable. The NVD entry lists CVSS 3.1: AV:N, AC:L, PR:N, UI:N, S:U, C:N, I:N, A:H (base score 7.5). Connect...

CVE-2023-39389

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability...

CVE-2023-39389

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability...

CVE-2023-39388

CVE-2023-39388 affects Huawei/HarmonyOS PMS module where input parameters are not strictly verified. This leads to a vulnerability that can cause the home screen to become unavailable if exploited. The available documents consistently describe the issue as an input-validation flaw in the PMS modu...

CVE-2023-39388

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability...

PT-2023-26911 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns the vulnerability of input parameters not being strictly verified in the AMS module. This could compromise apps' data security if...

PT-2023-26917 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: The issue is related to the PMS module, where input parameters are not strictly verified. This can lead to successful exploitation causing...

Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2023-70293)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A denial-of-service vulnerability exists in Huawei HarmonyOS, which stems from an error in the validation of input parameters by the storage module, and can ...

Mitigation of M-04: Mitigation error

MITIGATION IS NOT CONFIRMED MITIGATION IS NOT CONFIRMED Mitigation of M-04: Mitigation error Link to Issue: code-423n4/2023-03-asymmetry-findings932 Comments Even though the original issue is mitigated, as the exchange through Uniswap V3 has been completely removed in favor of using...

PT-2023-22780 · Archery · Archery

Name of the Vulnerable Software and Affected Versions: Archery affected versions not specified Description: The Archery project contains multiple SQL injection vulnerabilities that may allow an attacker to query the connected databases. User input coming from the db name parameter value and the...

WordPress plugin Solidres 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. uninstall is a plugin used to completely uninstall WordPress. relevant is a plugin...

Ydalb mapicoin 跨站脚本漏洞

Ydalb mapicoin is an application for Ydalb Personal Developer. A cross-site scripting vulnerability exists in Ydalb mapicoin version 1.9.0 and earlier, which stems from a cross-site scripting vulnerability due to the use of unknown input operation parameters...

Command Injection

emacs is vulnerable to Command Injection. The vulnerability exists because the input parameters are not properly escaped in the hfy-istext-command function, which allows an attacker to inject and execute malicious commands when the file name or directory name contains shell metacharacters...

Covid-19 Directory On Vaccination System 跨站脚本漏洞

The Covid-19 Directory On Vaccination System is a COVID-19 information management system by an individual developer in Ndueso Okorie, Nigeria. The system will accurately store and retrieve information about COVID-19 vaccinations in order to control the spread of a pandemic. A cross-site scripting...

CVE-2022-40677

A improper neutralization of argument delimiters in a command 'argument injection' in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 allows attacker to execute unauthorized code...

CVE-2022-40677

A improper neutralization of argument delimiters in a command 'argument injection' in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 allows attacker to execute unauthorized code...