CVE-2021-37033: Improper Neutralization of Special Elements in Output Used by a Downstream Component

There is an Injection attack vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability...

CVE-2021-37029: Undefined Security Weakness

There is an Identity verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability...

CVE-2021-37030: Incorrect Default Permissions

There is an Improper permission vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability...

PT-2021-21463

Name of the Vulnerable Software and Affected Versions Huawei Smartphone affected versions not specified Description The issue is related to an Injection attack vulnerability. Successful exploitation of this vulnerability may affect service availability. Recommendations At the moment, there is no...

PT-2021-21459

Name of the Vulnerable Software and Affected Versions Huawei Smartphone affected versions not specified Description The issue is related to an Identity verification vulnerability. Successful exploitation of this vulnerability may affect service availability. Recommendations At the moment, there i...

PT-2021-21460

Name of the Vulnerable Software and Affected Versions Huawei Smartphone affected versions not specified Description The issue is related to an improper permission vulnerability. Successful exploitation of this vulnerability may affect service availability. Recommendations At the moment, there is ...

Huawei HarmonyOS security vulnerabilities

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. an authentication vulnerability exists in Huawei Emui and Magic UI. An attacker could exploit this vulnerability to affect service availability...

Huawei Emui Injection Vulnerability

Huawei Emui is a mobile operating system developed on Android.Magic Ui is a mobile operating system developed on Android.An injection attack vulnerability exists in Huawei Emui and Magic UI. An attacker can exploit this vulnerability to affect service availability...

Oracle Linux 8 : libwebp (ELSA-2021-4231)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4231 advisory. 1.0.0-5 - Added fixes for rhbz1956853, rhbz1956856, rhbz1956868, rhbz1956917 Tenable has extracted the preceding description block directly from the...

libwebp: out-of-bounds read in ChunkVerifyAndAssign() in mux/muxread.c

A flaw was found in libwebp. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability...

libwebp: out-of-bounds read in ChunkAssignData() in mux/muxinternal.c

A flaw was found in libwebp. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability...

libwebp: excessive memory allocation when reading a file

A flaw was found in libwebp. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability...

libwebp: out-of-bounds read in WebPMuxCreateInternal

A flaw was found in libwebp. An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability...

lasso: XML signature wrapping vulnerability when parsing SAML responses

An XML Signature Wrapping XSW vulnerability was found in Lasso. This flaw allows an attacker to modify a valid SAML response to include an unsigned SAML assertion, which may be used to impersonate another valid user recognized by the service using Lasso. The highest threat from this vulnerability...

python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code

A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from...

python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code

A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from...

Huawei Emui and Magic UI Logic Bypass Vulnerability

Huawei Emui is a mobile operating system developed based on Android.Magic Ui is a mobile operating system developed based on Android. Huawei Emui and Magic UI have security vulnerabilities that can be exploited by attackers to compromise service integrity and availability...

Huawei Emui and Magic UI Configuration Flaw Vulnerability (CNVD-2021-84858)

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to a configuration flaw that could be exploited by attackers to compromise service availability...

Huawei Smartphone Buffer Overflow Vulnerability

Huawei Smartphone is a smartphone from China's Huawei Huawei. A buffer overflow vulnerability exists in several Huawei devices, which stems from an out-of-bounds read error in the product. An attacker could affect service availability through this vulnerability...

Huawei Emui and Magic UI Input Validation Vulnerability

Huawei Emui is a mobile operating system developed based on Android.Magic Ui is a mobile operating system developed based on Android. An input validation vulnerability exists in Huawei Emui and Magic UI. The vulnerability stems from the product not validating user input data. An attacker could...