CVE-2023-52379

Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-52379

Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-52375

Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability...

CVE-2023-52375

Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability...

CVE-2023-52375

CVE-2023-52375 concerns Huawei HarmonyOS/EMUI’s WMS (WindowManagerService) module. Connected sources describe a privilege control vulnerability in the WMS, which can affect usability and, per the NVD entry, may impact availability. The CVE’s description notes a permission control issue in WindowM...

CVE-2023-52374

Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-52374

Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality...

Privilege escalation

Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-52374

A privilege control vulnerability exists in the package management module of Huawei HarmonyOS and Huawei EMUI . This flaw allows an attacker to exploit incorrect authorization to compromise service confidentiality . While the specific root cause and versions are not detailed in the provided docum...

CVE-2023-52374

Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-14564

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description The issue is related to a permission control vulnerability in the package management module. Successful exploitation of this vulnerability may affect service confidentiality. Recommendations...

PT-2024-14569

Name of the Vulnerable Software and Affected Versions calendarProvider module affected versions not specified Description The issue concerns a permission control vulnerability in the calendarProvider module. Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-14565

Name of the Vulnerable Software and Affected Versions WindowManagerServices affected versions not specified Description The issue is related to a permission control vulnerability in the WindowManagerServices module. Successful exploitation of this vulnerability may affect availability...

Path traversal

EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login...

Data Visualisation Framework - Moderately critical - Cross Site Scripting - SA-CONTRIB-2023-055

This module allows you to turn various data sources Eg CSV or JSON file into interactive visualisation. The DVF module provides a field storage, widget & formatter that can be added to any entity. This module uses two third-party JS libraries having from low to medium vulnerabilities. One of the...

CVE-2023-49241

API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality...

Code injection

API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49241

API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-49241

CVE-2023-49241 is described across multiple sources as an API permission control vulnerability in the Huawei HarmonyOS network management module. The vulnerability may affect service confidentiality. The NVD entry lists CVSS 3.1 base metrics: AV:N, AC:L, PR:N, UI:N, S:U, C:H, I:N, A:N (score 7.5,...

PT-2023-31128 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns an API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect...