Huawei HarmonyOS code issue vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. A security vulnerability exists in Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to cause a process to restart...

Huawei HarmonyOS Input Validation Error Vulnerability (CNVD-2022-08313)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. A security vulnerability exists in Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to cause a process to restart...

Huawei HarmonyOS has an unspecified vulnerability (CNVD-2022-08315)

Huawei HarmonyOS is an operating system from Huawei, China. A security vulnerability exists in a component of Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...

Huawei HarmonyOS AOD module double release vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. The Huawei HarmonyOS AOD module is vulnerable to a double-release vulnerability that could be exploited by attackers to compromise integrity...

Huawei HarmonyOS Input Validation Error Vulnerability (CNVD-2022-17714)

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by attackers to compromise product confidentiality and availability...

Huawei HarmonyOS Data Processing Error Vulnerability (CNVD-2022-17719)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by an attacker to cause an application to crash...

Huawei HarmonyOS buffer overflow vulnerability (CNVD-2022-08453)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the Huawei HarmonyOS lock screen component. An attacker could exploit the vulnerability to cause user availability to be...

Huawei HarmonyOS has an unspecified vulnerability (CNVD-2022-08318)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. A security vulnerability exists in Huawei HarmonyOS Vision HwNearbyMain, which provides a microkernel-based, full-scenario distributed operating system. An attack...

Huawei HarmonyOS null pointer dereference vulnerability (CNVD-2022-17707)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. A security vulnerability exists in Huawei HarmonyOS SensorhubMain, which provides a microkernel-based, full-scenario distributed operating system. An attacker cou...

Huawei HarmonyOS design flaw vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based, distributed operating system. Huawei HarmonyOS contains a security vulnerability that could be exploited by attackers to compromise confidentiality...

Huawei HarmonyOS eID component null pointer reference vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. A null pointer reference vulnerability exists in the Huawei HarmonyOS eID component, which originates when the product's eID component makes a call to a released pointer...

CVE-2021-40525

Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path traversal, allowing reading and writing any file. This vulnerability had been patched in Apache James 3.6.1 and higher. We recommend the upgrade. Distributed and Cassandra based produc...

CVE-2021-40525

Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path traversal, allowing reading and writing any file. This vulnerability had been patched in Apache James 3.6.1 and higher. We recommend the upgrade. Distributed and Cassandra based produc...

Path traversal

Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path traversal, allowing reading and writing any file. This vulnerability had been patched in Apache James 3.6.1 and higher. We recommend the upgrade. Distributed and Cassandra based produc...

CVE-2021-40525 Sieve file storage vulnerable to path traversal attacks

Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path traversal, allowing reading and writing any file. This vulnerability had been patched in Apache James 3.6.1 and higher. We recommend the upgrade. Distributed and Cassandra based produc...

samba: Subsequent DCE/RPC fragment injection vulnerability

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements...

Huawei HarmonyOS UAF vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by an attacker to cause a device to reboot unexpectedly and execute kernel-mode code...

Huawei HarmonyOS Injection Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. A security vulnerability exists in Huawei HarmonyOS, which stems from a parameter injection type of vulnerability in a component of Huawei HarmonyOS. No details o...

Huawei HarmonyOS Credential Management Class Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by an attacker to compromise confidentiality...

Huawei HarmonyOS encryption issue vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. Huawei HarmonyOS is vulnerable to an encryption issue, which stems from a component of the product that does not effectively encrypt encrypt encrypted data. An...