246 matches found
CVE-2025-1532 Code Injection Vulnerability in Phoneservice
Phoneservice module is affected by code injection vulnerability, successful exploitation of this vulnerability may affect service confidentiality and integrity...
CVE-2025-1532
The CVE-2025-1532 entry corresponds to Huawei/Com.Hihonor.Phoneservice: com.hihonor.phoneservice version 11.0.0.271 affected by a code injection vulnerability that may compromise service confidentiality and integrity. A fix is to update to a newer Phoneservice version; as a temporary measure, res...
CVE-2025-2188 Whitelist bypass Vulnerability in GameCenter
There is a whitelist mechanism bypass in GameCenter ,successful exploitation of this vulnerability may affect service confidentiality and integrity...
CVE-2025-2188
CVE-2025-2188 corresponds to a whitelist bypass vulnerability in GameCenter. Connected sources confirm GameCenter as the affected software, with the root cause being a bypass of the whitelisting mechanism, leading to potential confidentiality and integrity impact (Vulnerable component: whitelist ...
CVE-2025-2188 Whitelist bypass Vulnerability in GameCenter
There is a whitelist mechanism bypass in GameCenter ,successful exploitation of this vulnerability may affect service confidentiality and integrity...
CVE-2025-31175
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2025-31175
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2025-31175
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2025-31175
CVE-2025-31175 is a deserialization mismatch vulnerability in the DSoftBus module used by Huawei HarmonyOS and EMUI. Root cause: deserialization mismatch. Impact: could affect service integrity. Public assessments: CVSSv3.1 base score 7.5 ( NETWORK, NONE privileges, I HIGH) and Huawei CNA score 8...
CVE-2025-31175
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2025-31175
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity...
PT-2025-15182 · Dsoftbus · Dsoftbus
Name of the Vulnerable Software and Affected Versions: DSoftBus module affected versions not specified Description: The issue is related to a deserialization mismatch vulnerability in the DSoftBus module. Successful exploitation of this vulnerability may affect service integrity. Recommendations:...
CVE-2024-9095
In lunary-ai/lunary version v1.4.28, the /bigquery API route lacks proper access control, allowing any logged-in user to create a Datastream to Google BigQuery and export the entire database. This includes sensitive data such as password hashes and secret API keys. The route is protected by a...
CVE-2024-9095
CVE-2024-9095 affects lunary-ai/lunary v1.4.28. The exposed /bigquery API route allows any logged-in user to create a Datastream to Google BigQuery and export the entire database, including sensitive data such as password hashes and secret API keys. The route is guarded by a config flag (config.D...
CVE-2024-25724
In RTI Connext Professional 5.3.1 through 6.1.0 before 6.1.1, a buffer overflow in XML parsing from Routing Service, Recording Service, Queuing Service, and Cloud Discovery Service allows attackers to execute code with the affected service's privileges, compromise the service's integrity, leak...
CVE-2020-26821
SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the SVG Converter Service, this has an impact to the integrity and availability of the service...
CVE-2024-54098
Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2024-42038
Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability...
Huawei EMUI and HarmonyOS System Service Module Service Logic Error Vulnerability
Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. A service logic error vulnerability exists in the Huawei EMUI and HarmonyOS system service module, which can be...