1072 matches found
CVE-2024-36260 Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write...
CVE-2024-36260 Arkcompiler Ets Runtime has an out-of-bounds write vulnerability
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write...
CVE-2024-36260
CVE-2024-36260 affects OpenHarmony, with Arkcompiler Ets Runtime vulnerable to an out-of-bounds write that could enable remote code execution in pre-installed apps on OpenHarmony v4.0.0 and earlier. The issue is described as a remote code execution risk; no exploit details are provided in the sou...
CVE-2024-36243 Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write...
CVE-2024-36243 Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write...
CVE-2024-36243
CVE-2024-36243 affects OpenHarmony Arkcompiler Ets Runtime in versions prior to 4.0.0 and 4.0.0 as baseline. The vulnerability is an out-of-bounds read/write that enables remote arbitrary code execution in pre-installed apps. Root cause details are described in related vulnerability records and P...
CVE-2024-37030 Arkcompiler Ets Runtime has a use after free vulnerability
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through use after free...
CVE-2024-37030 Arkcompiler Ets Runtime has a use after free vulnerability
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through use after free...
CVE-2024-37030
OpenHarmony CVE-2024-37030 affects OpenHarmony v4.0.0 and earlier; the vulnerability is described as a use-after-free in Arkcompiler Ets Runtime that enables a remote attacker to execute arbitrary code in pre-installed apps. The CVSS information indicates a network-exposed, highly severe impact w...
PT-2024-26938 · Unknown · Openharmony
Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 OpenHarmony version 4.0.0 Description: The issue allows a remote attacker to execute arbitrary code in pre-installed apps through an out-of-bounds write. Recommendations: For OpenHarmony versions prior to...
OpenHarmony Security Vulnerabilities
OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony prior to version v4.0.0. A remote attacker could exploit the vulnerability to execute arbitrary code in a pre-installe...
OpenHarmony Security Vulnerabilities
OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony prior to version v4.0.0. A remote attacker could exploit the vulnerability to execute arbitrary code in a pre-installe...
PT-2024-27286 · Unknown · Openharmony
Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 Description: The issue allows a remote attacker to execute arbitrary code in pre-installed apps through an out-of-bounds write. Recommendations: For OpenHarmony versions prior to 4.0.0, update to a version...
OpenHarmony Security Vulnerabilities
OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony prior to version v4.0.0. A remote attacker could exploit the vulnerability to execute arbitrary code in a pre-installe...
The vulnerability of the LaborOfficeFree software for managing shift scheduling and working hours, which stems from the use of pre-installed database records, allows a perpetrator to gain unauthorized access to the application’s backup database.
The vulnerability of the executable files LOFservice.exe and LaborOfficeFree.exe of the LaborOfficeFree software for workforce management and time tracking involves the use of pre-installed database credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...
The vulnerability of the /web_cste/cgi-bin/product.ini component of the Telnet service in the TOTOLINK CP900L wireless access point’s microprogramming system allows a malicious user to gain root privileges and access the system.
The vulnerability of the /webcste/cgi-bin/product.ini component of the Telnet service in the TOTOLINK CP900L wireless access point software is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow a malicious actor to gain root privileges and access the syst...
ROS-20240527-04
A vulnerability in the Git distributed version control system exists due to a process control issue. Exploitation of the vulnerability could allow an attacker to execute arbitrary code when cloning specially crafted local repositories A vulnerability in the Git distributed version control system ...
The vulnerability of the distributed Git version control system, related to the use of pre-installed security-related data, allows a hacker to create hard links to any readable file within the same file system.
The vulnerability of the distributed Git version control system is related to the use of pre-installed data related to security. Exploiting this vulnerability allows a attacker to create hard links to any readable file within the same file system...
The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to the use of pre-installed credentials, allows a intruder to gain full access to the device.
The vulnerability of the MICROprogramming software used in the SIMATIC CN 4100 communication gateway lies in the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the device...
