Design/Logic Flaw

The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction...

PT-2022-5646

Name of the Vulnerable Software and Affected Versions Microsoft Office versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Description The issue exists due to insufficient input validation in Microsoft Office and Microsoft 365 Apps f...

CVE-2022-44553

The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically...

CVE-2022-44561

The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction...

CVE-2022-44561

CVE-2022-44561 involves a permission verification flaw in the preset launcher module that allows unauthorized apps to add arbitrary widgets and shortcuts without user interaction. Public sources (NVD/Red Hat/CVE lists) describe a HIGH severity (I=HIGH) with no interaction required. Connected docu...

PT-2022-27238 · Hiview · Hiview

Name of the Vulnerable Software and Affected Versions: HiView module affected versions not specified Description: The HiView module has a vulnerability where it fails to filter out third-party apps when invoking the system provider. This could lead to third-party apps starting periodically if the...

CVE-2022-44549

The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing APIs without authorization, affecting user confidentiality...

CVE-2022-44553

The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically...

PT-2022-27247 · Unknown · Preset Launcher Module

Name of the Vulnerable Software and Affected Versions: Preset launcher module affected versions not specified Description: The preset launcher module has a permission verification issue. This allows unauthorized apps to add arbitrary widgets and shortcuts without any interaction. Recommendations:...

CVE-2022-44553

CVE-2022-44553 affects the HiView module in HarmonyOS. Root cause: the HiView module does not filter third‑party apps when invoking the system provider, enabling potential abuse. Impact: successful exploitation may cause third‑party apps to start periodically. CVSSv3.1 base score 5.3 (I: Low, A: ...

CVE-2022-44549

CVE-2022-44549 concerns Huawei HarmonyOS’ LBS module, specifically a vulnerability in the geofencing API access. The issue allows third‑party apps to access geofencing APIs without authorization, compromising user confidentiality. The NVD and related entries show a CVSS v3.1 base score of 7.5 (HI...

Mobile app usage soars but security still falls short

Benchmark analysis of mobile apps shows 99% have security or privacy vulnerabilities. These weaknesses can cause exposure of sensitive information and jeopardize brand reputation, customer trust and company value...

CVE-2022-27855

Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...

CVE-2022-27855

Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...

CVE-2022-27855

The CVE-2022-27855 CSRF vulnerability affects the Fatcat Apps Analytics Cat plugin for WordPress (versions ≤ 1.0.9). The issue allows an attacker to change plugin settings due to CSRF, enabling unintended configuration changes. Reported root cause is a cross-site request forgery flaw in plugin se...

Description of the security update for Office Web Apps Server 2013: November 8, 2022 (KB5002261)

None None...

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security vulnerability exists in Microsoft Office. The following products and editions are...

Security Updates for Microsoft Office Web Apps (November 2022)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-41060, CVE-2022-41103 ...

PT-2022-5639 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to errors in security settings, allowing an...