839 matches found
Design/Logic Flaw
Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-49246
Technical details about CVE-2023-49246 are not publicly provided in the supplied documents. No affected products, versions, root cause, or fixes are specified here. Monitor for new advisories or updates from vendors and CERTs.
CVE-2023-49242
CVE-2023-49242 affects Huawei HarmonyOS in the running management module, described as a “free broadcast vulnerability.” The vulnerability may compromise service confidentiality if exploited. The NVD entry lists CVSS v3.1 base score 7.5 (Network) with Low attack complexity and no user interaction...
PT-2023-31133 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns an unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality...
PT-2023-31129 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A free broadcast vulnerability exists in the running management module. This issue may impact service confidentiality if successfully exploited. Recommendations: At the moment, ther...
Huawei HarmonyOS Security Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an override vulnerability in the card management module. Successful exploitation of thi...
Huawei HarmonyOS Security Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an override vulnerability in the card management module. Successful exploitation of thi...
CVE-2023-47503
An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module...
CVE-2023-47503
An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module...
CVE-2023-46756
CVE-2023-46756 describes a permission-control flaw in Huawei HarmonyOS/EMUI’s window management module that can lead to malicious pop-up windows. Documented impact: privilege-control weakness with potential UI disruption; no concrete exploit details, affected versions, or remediation information ...
CVE-2023-44098
Vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may affect service confidentiality...
PT-2023-29098 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may affect service...
Huawei HarmonyOS and EMUI Information Disclosure Vulnerability (CNVD-2023-88962)
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. Huawei HarmonyOS and EMUI have an information disclosu...
Huawei HarmonyOS 信息泄露漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. Huawei HarmonyOS and EMUI have an information disclosu...
The vulnerability of the WS_FTP Server server control module allows attackers to perform cross-site scripting attacks.
The vulnerability of the WSFTP Server server management module is related to the lack of measures taken to protect the website structure when processing SSL certificate parameters. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
CVE-2023-40047
In WSFTP Server version prior to 8.8.2, a stored cross-site scripting XSS vulnerability exists in WSFTP Server's Management module. An attacker with administrative privileges could import a SSL certificate with malicious attributes containing cross-site scripting payloads. Once the cross-site...
CVE-2022-48606
Stability-related vulnerability in the binder background management and control module. Successful exploitation of this vulnerability may affect availability...
CVE-2023-40047 WS_FTP Server Stored Cross-Site Scripting Vulnerability
In WSFTP Server version prior to 8.8.2, a stored cross-site scripting XSS vulnerability exists in WSFTP Server's Management module. An attacker with administrative privileges could import a SSL certificate with malicious attributes containing cross-site scripting payloads. Once the cross-site...