1037 matches found
JumpServer > 3.6.4 - Information Disclosure
JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...
CVE-2026-49313
Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49310
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49312
Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49311
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41987
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49309
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49313
CVE-2026-49313 is a permission control vulnerability in the app lock module of a Huawei device (CNA: [email protected]). Successful exploitation may affect service confidentiality . The CVSS 3.1 score is 5.5 (Medium) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , indicating a local attack ...
EUVD-2026-74617
Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49313
Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49309
CVE-2026-49309 is a permission control vulnerability in the Settings module of a Huawei consumer product, reported by Huawei's PSIRT. Successful exploitation may affect service confidentiality . The CVSS 3.1 score is 4.8 (MEDIUM) with a vector of AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N, indicating th...
EUVD-2026-74616
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49309
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-41987
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-74614
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41987
CVE-2026-41987 is a permission control vulnerability in the app management module of a Huawei consumer device, as reported by Huawei's PSIRT (CNA source: [email protected]). Successful exploitation may affect availability , with a CVSS 3.1 base score of 6.2 (MEDIUM) . The attack vector is local , ...
EUVD-2026-74598
Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49312
CVE-2026-49312 is a permission control vulnerability in the window module of Huawei consumer devices, as indicated by the September 2026 security bulletins for both desktops and laptops. Successful exploitation may affect service confidentiality . The assigned CVSS 3.1 score is 4.0 (MEDIUM) with ...