CVE-2023-39380

Technical details about CVE-2023-39380 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-39380

Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally...

CVE-2023-39380

Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally...

CVE-2023-39406: Undefined Security Weakness

Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart...

Huawei EMUI Security Vulnerability

Huawei EMUI is an Android-based mobile operating system developed by Chinese company Huawei Huawei. A security vulnerability exists in Huawei EMUI version 13.0.0, EMUI 12.0.0, and EMUI 11.0.1, which stems from an issue with permission control in the XLayout component...

PT-2023-26915 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause...

PT-2023-26934

Name of the Vulnerable Software and Affected Versions XLayout component affected versions not specified Description The issue is related to a permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart. Recommendation...

CVE-2023-39380: Improper Authentication

Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally...

CVE-2023-39387: Undefined Security Weakness

Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

PT-2023-26908 · Unknown · Audio Module

Name of the Vulnerable Software and Affected Versions: Audio module affected versions not specified Description: The issue is related to a permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally...

PT-2023-6779 · Аврора · Аврора

Name of the Vulnerable Software and Affected Versions: Аврора affected versions not specified Description: The issue is related to a flaw in the notification mechanism of the Аврора operating system, specifically concerning insufficient permission control for applications sending notifications...

Cross site scripting

Winter is a free, open-source content management system CMS based on the Laravel PHP framework. Users with the backend.managebranding permission can upload SVGs as the application logo. Prior to version 1.2.3, SVG uploads were not sanitized, which could have allowed a stored cross-site scripting...

CVE-2022-48515

Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2022-48515

Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2022-48514

The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality...

Design/Logic Flaw

The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality...

Design/Logic Flaw

Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2022-48515

Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2022-48515

Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2022-48514

The CVE-2022-48514 entry concerns HarmonyOS Sepolicy: the Netlink usage is under inappropriate permission control, leading to potential confidentiality impact. Affected component is Sepolicy within HarmonyOS; root cause described as improper Netlink permission handling. The available connected so...