CVE-2024-45449

Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-45441

Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-42031

CVE-2024-42031 is a reported access permission verification vulnerability in the Huawei HarmonyOS/EMUI Settings module that could affect service confidentiality. Public descriptions consistently state an issue in the Settings module’s access control, with the CVSSv3.1 base score of 7.5 (HIGH) and...

Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2024-629)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-629 advisory. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing...

Rocky Linux 9 : git-lfs (RLSA-2024:2724)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2724 advisory. - An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining...

SUSE-SU-2024:1444-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies as secure bsc1222857 - CVE-2024-3096: Fixed bypass on null byte leading passwords checked via passwordverify bsc1222858...

Infinite loop

Overview BouncyCastle is a C implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Infinite loop in ED25519 verification in the ScalarUtil class. An attacker can send a malicious signature and public key to trigger denial of service. Remediation There is ...

CVE-2024-27896

Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect integrity...

CVE-2024-27897

Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-27897

CVE-2024-27897 describes an input verification vulnerability in the call module of Huawei HarmonyOS Wearables. The issue is that improper input handling in the call module could potentially expose service confidentiality. Affected component: the call module within Huawei HarmonyOS Wearables; sour...

CVE-2024-27896

CVE-2024-27896 is described across multiple feeds as an input verification vulnerability in Huawei HarmonyOS/EMUI log-module. The NVD entry lists a CVSS 3.1 base score of 7.5 (HIGH) with network attack vector and no user interaction, but integrity impact is HIGH. Connected records corroborate the...

CVE-2023-52552

Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52552

Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability...

PT-2024-22118 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Call module affected versions not specified Description: The issue is related to an input verification vulnerability in the call module. Successful exploitation of this vulnerability may affect service confidentiality. Recommendations: At the...

CVE-2023-52368

Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-52368

Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally...

Input validation

Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-52368

Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-52368

CVE-2023-52368 is linked to Huawei HarmonyOS/EMUI via CNVD/CNNVD references. The vulnerability is described as an input verification flaw in the Accounts module that can cause features to behave abnormally and, per CNVD, may lead to a denial-of-service condition. The NVD entry lists a network-bas...

Null pointer dereference

jwx is a Go module implementing various JWx JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE technologies. Calling jws.Parse with a JSON serialized payload where the signature field is present while protected is absent can lead to a nil pointer dereference. The vulnerability can be used to crash/DOS ...