CVE-2024-57961

CVE-2024-57961 is an out-of-bounds write vulnerability in Huawei’s HarmonyOS emcom module. Multiple sources (including Huawei/Red Hat/CVE databases) describe that exploitation can lead to abnormal function execution with high impact to confidentiality, integrity, and availability; CVSS 3.1 base s...

CVE-2024-57958

CVE-2024-57958 is an out-of-bounds array read vulnerability in Huawei HarmonyOS/EMUI FFRT module. The flaw affects HarmonyOS/FFRT, enabling abnormal feature behavior on successful exploitation (impact described as high in CVSS data). The provided documents do not specify affected versions or a pa...

CVE-2024-57954

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2020-14666

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Display. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Emai...

CVE-2024-36500

Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

GLSA-202501-09 : QtWebEngine: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202501-09 QtWebEngine: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

CVE-2025-21564

Oracle Agile PLM Framework (Oracle Supply Chain) is affected in version 9.3.6, specifically the Agile Integration Services component. The CVE entry describes an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to obtain unauthorized access to critic...

CVE-2025-21536

CVE-2025-21536 affects Oracle MySQL Server (Server: Optimizer) with vulnerable versions 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or a complete denial of ...

CVE-2025-22760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard CodeBard Help Desk codebard-help-desk allows Reflected XSS.This issue affects CodeBard Help Desk: from n/a through = 1.1.2...

CVE-2025-22765

CVE-2025-22765 is a Reflected XSS in the WP Order By WordPress plugin, affecting versions up to 1.4.2. The CVSS v3.1 base score is 7.1 (HIGH). The description notes a fix in 1.4.2; no exploitation status is provided in the available documents.

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2025-1033)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-56453

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-54120

Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-56442

Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-56442

CVE-2024-56442 involves Huawei HarmonyOS/NFC service module where native APIs are not implemented. The core issue is a missing implementation in the NFC service module’s APIs, leading to abnormal feature behavior upon exploitation. Documented impact indicates that exploitation could cause feature...

CVE-2024-56440

Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-56279 WordPress Compact WP Audio Player plugin <= 1.9.14 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in mra13 Compact WP Audio Player compact-wp-audio-player allows Server Side Request Forgery.This issue affects Compact WP Audio Player: from n/a through = 1.9.14...

CVE-2024-56287 WordPress WP jQuery DataTable Plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AppJetty WP jQuery DataTable wp-jquery-datatable allows Stored XSS.This issue affects WP jQuery DataTable: from n/a through = 4.0.1...

GHSA-WV23-996V-Q229 PhpSpreadsheet has a Cross-Site Scripting (XSS) vulnerability in custom properties

Cross-Site Scripting XSS vulnerability in custom properties Product: Phpspreadsheet Version: version 3.6.0 CWE-ID: CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' CVSS vector v.3.1: 5.4 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS vector v.4.0: 4.8...

PT-2025-2346 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue concerns a rejected CVE record due to non-compliance with CNA rules, as it was not used. No further details are provided about the nature of the issue or its...