OpenHarmony 代码问题漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom OpenAtom Foundation. A code issue vulnerability exists in OpenHarmony 5.0.2 and prior versions, which stems from a null pointer dereference that could lead to arbitrary code execution in pre-installed...

OpenHarmony 缓冲区错误漏洞

OpenHarmony is an open source project for a kind of Hongmeng operating system from the China OpenAtom OpenAtom Foundation. A buffer error vulnerability exists in OpenHarmony 5.0.2 and earlier versions, which stems from an out-of-bounds write and could lead to arbitrary code execution in...

OpenHarmony 缓冲区错误漏洞

OpenHarmony is an open source project for a kind of Hongmeng operating system from the China OpenAtom OpenAtom Foundation. A buffer error vulnerability exists in OpenHarmony 5.0.2 and earlier versions, which stems from an out-of-bounds write and could lead to arbitrary code execution in...

CVE-2024-38386

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-37077

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

Transsion Holdings Infinix Mobile devices 安全漏洞

Transsion Holdings Infinix Mobile devices are a range of mobile devices from Transsion Holdings, a Chinese company. A security vulnerability exists in the Transsion Holdings Infinix Mobile devices, which stems from the pre-installed com.rlk.weathers application exposing an unprotected content...

The vulnerability of Siemens Mendix Encryption, related to the use of pre-installed data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of Siemens Mendix Encryption lies in the use of pre-installed data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the microprogramming software of Moxa EDS-P510 allows a malicious individual to gain access to applications via the Telnet protocol.

The vulnerability of Moxa EDS-P510 microcontroller-based software is related to the use of pre-installed credentials. Exploiting this vulnerability can allow an attacker to remotely access applications via Telnet, in order to execute commands or modify settings...

The vulnerability of the software for managing and monitoring hardware resources of the IBM Flexible Service Processor (FSP) in IBM Power System software allows a hacker to gain access to the FSP services.

The vulnerability of the software for managing and monitoring hardware resources of the IBM Flexible Service Processor FSP in IBM Power System software is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor to gain access to FSP services...

The vulnerability of the SCKU Dome software, related to the presence of pre-installed account data, allows attackers to enhance their privileges within the system and gain access to protected information.

The vulnerability of the SCKU Dome software is related to the presence of pre-installed account data. Exploiting this vulnerability can allow a remote attacker to enhance their privileges within the system and gain access to protected information...

CVE-2024-39831

in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free...

CVE-2024-39831 AccessTokenManager has an use after free vulnerability

in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free...

CVE-2024-39831

OpenHarmony CVE-2024-39831 affects OpenHarmony v4.1.0. The vulnerability is described as a use-after-free in AccessTokenManager that allows a local attacker with high privileges to achieve arbitrary code execution within pre-installed apps. The issue is local in scope with high confidentiality/in...

CVE-2024-39831 AccessTokenManager has an use after free vulnerability

in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free...

The vulnerability of the file /squashfs-root/web_cste/cgi-bin/product.ini of the TOTOLink T10 router microprogramming software allows a intruder to gain unauthorized access to the Telnet service.

The vulnerability of the file /squashfs-root/webcste/cgi-bin/product.ini of the TOTOLink T10 microprogramming router software is related to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the Telnet service...

CVE-2024-39816

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-39816

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-38386

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-39816 Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-39816 Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...