PT-2022-27238 · Hiview · Hiview

Name of the Vulnerable Software and Affected Versions: HiView module affected versions not specified Description: The HiView module has a vulnerability where it fails to filter out third-party apps when invoking the system provider. This could lead to third-party apps starting periodically if the...

CVE-2022-44553

The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically...

CVE-2021-46851

The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback...

CVE-2022-44554

The power module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause abnormal status of a module on the device...

CVE-2022-44551

The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability...

PT-2022-27246 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Launcher module affected versions not specified Description: The issue concerns an Intent redirection vulnerability in the launcher module. This vulnerability can be exploited to modify launcher module data. Recommendations: At the moment,...

PT-2022-27243 · Unknown · Ams Module

Name of the Vulnerable Software and Affected Versions: AMS module affected versions not specified Description: The issue is related to a serialization/deserialization mismatch in the AMS module. This could potentially lead to privilege escalation if successfully exploited. Recommendations: At the...

CVE-2022-44556

Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability...

ASB-A-244109033

A module in camera driver do not check the data of ioctl parameter, which may cause deny of service happens...

The vulnerability of the ngx_http_hls_module module in the NGINX Application Monitoring and Management Platform Ingress Controller allows a attacker to cause service interruptions or potentially exert other effects.

The vulnerability of the ngxhttphlsmodule module in the NGINX Application Monitoring and Management Controller platform relates to operations that occur outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service failures or potentially have other adver...

CVE-2022-42218

Open Source SACCO Management System v1.0 vulnerable to SQL Injection via /saccoshield/manageloan.php...

CVE-2022-39011

The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause unauthorized access to the HISP module...

CVE-2022-38998

The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality...

CVE-2022-41584

The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting...

CVE-2022-41576

The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices...

PT-2022-24640 · Unknown · Hipp Module

Name of the Vulnerable Software and Affected Versions: HIPP module affected versions not specified Description: The issue is related to the HIPP module not verifying data transferred in the kernel space. This can lead to an out-of-bounds read when successfully exploited, affecting data...

PT-2022-24642 · Unknown · Hipp Module

Name of the Vulnerable Software and Affected Versions: HIPP module affected versions not specified Description: The issue concerns a vulnerability in the HIPP module that allows bypassing the check of the data transferred in the kernel space. Successful exploitation may cause out-of-bounds access...

CVE-2022-41585

The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting...

PT-2022-25951 · Mptcp · Mptcp

Name of the Vulnerable Software and Affected Versions: MPTCP module affected versions not specified Description: The issue is related to an out-of-bounds write vulnerability in the MPTCP module. Successful exploitation of this vulnerability may cause root privilege escalation attacks by modifying...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a bypass checking vulnerability in the HISP module for data passed in the kernel state...