Buffer overflow

The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation...

Buffer overflow

The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation...

CVE-2022-34741

CVE-2022-34741 concerns Huawei/HarmonyOS: the NFC module in HarmonyOS 2.0 is affected by a buffer overflow caused by a boundary error when handling untrusted input. This can lead to exceptions or abnormal behavior during NFC card registration, deletion, or activation. The connected documents corr...

CVE-2022-34740

The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation...

CVE-2022-34740

Summary (CVE-2022-34740) : The vulnerability is in the NFC module of Huawei HarmonyOS devices, described as a buffer overflow. Successful exploitation may cause exceptions during NFC card registration, deletion, and activation. The NVD records CVSS v3.1 impact as Medium (I/H) with Adjacent attack...

PT-2022-22310

Name of the Vulnerable Software and Affected Versions NFC module affected versions not specified Description The NFC module has a buffer overflow issue. This can cause exceptions during NFC card registration, deletion, and activation. Recommendations At the moment, there is no information about a...

CVE-2022-34740: Buffer Copy without Checking Size of Input

The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation...

CVE-2022-34741: Buffer Copy without Checking Size of Input

The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation...

PT-2022-7794

Name of the Vulnerable Software and Affected Versions simplepush server affected versions not specified Description The issue allows an attacker to generate endless exceptions or slow down the server by registering bogus applications with bad deviceTokens. This can turn the server into a DDOS...

Security Advisory - Input Verification Vulnerability Involving Huawei Printer Products

Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause device service exceptions. Vulnerability ID: HWPSIRT-2022-80078 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-34159. For products that...

Denial Of Service (DoS)

.NET and Visual Studio are vulnerable to Denial Of Service DoS. The vulnerability exists due to a flaw in dotnet allowing an attacker to crash the system by sending MyCookie=chunks-2147483647 without the actual cookie chunks, causing large allocations, exceptions, and excess CPU utilization on th...

Keycloak leaks sensitive information in logged exceptions

A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality...

Mayaa Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions...

GHSA-M3P9-C7P3-XXMP Mayaa Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions...

Security Bulletin: Two vulnerabilities in WAS Liberty affect IBM Transformation Extender Advanced and IBM Standards Processing Engine (CVE-2016-0378 and CVE-2016-5986)

Summary Two vulnerabilities have been found in WAS Liberty, which is shipped in IBM Transforation Extender Advanced and IBM Standards Processing Engine. IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by improper handling of exceptions...

CVE-2022-29790

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions...

CVE-2022-29790

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions...

CVE-2022-29790

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions...

Design/Logic Flaw

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions...

CVE-2022-29790

Huawei HarmonyOS exposes a vulnerability in the graphics acceleration service where multi-threaded access to the graphics database can lead to service exceptions. The issue is described across multiple feeds (including Red Hat and CNVD entries) as a multi-thread access flaw in the graphics compon...