CVE-2024-56452

The CVE-2024-56452 issue concerns the 3D engine module’s glTF model loading where input parameters are not verified. The vulnerability affects the loading path of glTF models via the 3D engine module and is described as impacting availability. The PT-2025-3296 entry confirms the affected componen...

CVE-2024-56442

Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

Google Android onPrimaryClipChanged elevation of privilege vulnerability

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android onPrimaryClipChanged, which can be exploited by an attacker to submit a special request for elevation of privilege...

PT-2025-2281 · Unknown · Wlan Sta Driver

Name of the Vulnerable Software and Affected Versions: WLAN STA driver affected versions not specified Description: The issue is related to a reachable assertion in the WLAN STA driver due to improper exception handling. This could lead to a local denial of service if a malicious actor has alread...

CVE-2025-0226 Tsinghua Unigroup Electronic Archives System downLoad.html download information disclosure

A vulnerability, which was classified as problematic, has been found in Tsinghua Unigroup Electronic Archives System 3.2.21080262532. Affected by this issue is the function download of the file /collect/PortV4/downLoad.html. The manipulation of the argument path leads to information disclosure. T...

CVE-2025-0222 IObit Protected Folder IOCTL IUProcessFilter.sys 0x8001E004 null pointer dereference

A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the library IUProcessFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be...

SiYuan has an arbitrary file deletion vulnerability

Summary A arbitrary file deletion vulnerability has been identified in the latest version of Siyuan Note. The vulnerability exists in the POST /api/history/getDocHistoryContent endpoint.An attacker can craft a payload to exploit this vulnerability, resulting in the deletion of arbitrary files on...

Huawei Myna Input Validation Error Vulnerability

Huawei Myna is a smart speaker from Chinese company Huawei Huawei. Huawei Myna suffers from an Input Validation Error vulnerability that originates from a module that does not adequately integrity check inputs in certain scenarios. An attacker can exploit this vulnerability to affect the normal...

CVE-2025-22214

CVE-2025-22214 relates to Landray EIS versions 2001–2006 and describes a SQL injection vulnerability in the message handling path at Message/fi_message_receiver.aspx?replyid= . The available connected documents confirm the affected product and the injection vector but do not provide explicit expl...

Elevation of Privilege Vulnerability in Hot Velvet Security Software of Beijing Hot Velvet Network Technology Co.

Firedown Security is a free computer defense and antivirus security software. Beijing FireFleece Network Technology Co. FireFleece Security Software has an elevation of privilege vulnerability that can be exploited by attackers to elevate privileges...

CVE-2019-8446

creationtimestamp| type| source ---|---|--- 2024-12-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-29 2025-01-14 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-14 2025-01-26 00:00:00+00:00| seen| The Shadowserv...

CVE-2021-22484

Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory OOM...

CVE-2021-22484

CVE-2021-22484 affects Huawei wearables/HarmonyOS where the vulnerability is due to not verifying the actual data size when reading data. This can lead to a server out-of-memory (OOM) condition if exploited. Public references describe the issue generically; no concrete exploitation details are pr...

CVE-2020-9081

There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. Vulnerability ID: HWPSIRT-2019-12144 This vulnerability has...

CVE-2020-9253

There is a stack overflow vulnerability in some Huawei smart phone. An attacker can craft specific packet to exploit this vulnerability. Due to insufficient verification, this could be exploited to tamper with the information to affect the availability. Vulnerability ID: HWPSIRT-2019-11030 This...

CVE-2024-47150

Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak...

CVE-2024-8993

Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak...

CVE-2024-47154

Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak...

CVE-2024-47154

Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak...

CVE-2024-47154

CVE-2024-47154 : Information-leak vulnerability affecting Honor MagicOS. CNNVD notes the issue in MagicOS version 8.0.0.173, enabling leakage of sensitive data. NVD/Red Hat entries corroborate a high confidentiality impact with a local attack vector and low privileges required (CVSS base metrics ...