CVE-2023-41309

CVE-2023-41309 affects Huawei/HarmonyOS, with a privilege-control flaw in the MediaPlaybackController module that can impact availability. The CN/ENVID sources (CNNVD, RH, NVD, CVE list) identify HarmonyOS as affected; specific affected versions per CNNVD include 4.0.0, 3.1.0, 3.0.0, 2.0.1 and 2....

CVE-2023-41298

Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2023-41298

Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality...

Design/Logic Flaw

Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2023-41298

CVE-2023-41298 affects Huawei HarmonyOS, stemming from a privilege-control issue in the window module that could leak confidential information. The vulnerability is described as a permission-control flaw in the window module with confidentiality impact (CVSS v3.1 base score 7.5). No exploitation ...

CVE-2023-41298

Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2023-41298

Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality...

PT-2023-27898 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to be activate...

PT-2023-27896 · Unknown · Mediaplaybackcontroller

Name of the Vulnerable Software and Affected Versions: MediaPlaybackController affected versions not specified Description: The issue is related to a permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability...

Authentication flaw

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...

CVE-2023-42442 JumpServer session replays download without authentication

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...

CVE-2023-42442 JumpServer session replays download without authentication

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...

CVE-2023-42442 JumpServer session replays download without authentication

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...

CVE-2023-39406

Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart...

CVE-2023-39387

Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

CVE-2023-39387

Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

Design/Logic Flaw

Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart...

Design/Logic Flaw

Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

CVE-2023-39406

Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart...

CVE-2023-39406

CVE-2023-39406 is described as a permission‑control vulnerability in the XLayout component . Exploitation is reported to possibly force an app restart. The CVSS‑3.1 vector shows a Network attack vector, no privileges , no user interaction , with Privilege Required: None and Impact: Availability H...