Huawei HarmonyOS Gallery Information Management Class Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An information management class vulnerability exists in Huawei HarmonyOS Gallery, which stems from an information management class in the Gallery module. An...

Huawei HarmonyOS/EMUI Privilege Control Vulnerability

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS and...

CVE-2024-10535 Video Gallery for WooCommerce <= 1.31 - Missing Authorization to Unauthenticated Limited File Deletion

The Video Gallery for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the removeunusedthumbnails function in all versions up to, and including, 1.31. This makes it possible for unauthenticated attackers to delete thumbnails ...

CVE-2024-10535

The CVE-2024-10535 entry concerns the Video Gallery for WooCommerce plugin for WordPress. Multiple connected sources confirm affected software and root cause: versions up to and including 1.31 are vulnerable due to a missing capability check in the remove_unused_thumbnails() function, enabling un...

CVE-2024-10535 Video Gallery for WooCommerce <= 1.31 - Missing Authorization to Unauthenticated Limited File Deletion

The Video Gallery for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the removeunusedthumbnails function in all versions up to, and including, 1.31. This makes it possible for unauthenticated attackers to delete thumbnails ...

WordPress plugin Video Gallery for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Video Gallery for WooCommerce plugin <= 1.31 - Missing Authorization to Unauthenticated Limited File Deletion vulnerability

Missing Authorization to Unauthenticated Limited File Deletion vulnerability discovered by incognito in WordPress Plugin Video Gallery for WooCommerce versions = 1.31...

CVE-2024-9878

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-9878

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-51527

Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-51527

Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-51523

Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-51523

Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-9878 Photo Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site Scripting

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-51527

Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-51527

CVE-2024-51527 concerns a permission control vulnerability in Huawei’s Gallery app across HarmonyOS/EMUI. The issue is described as a privilege control flaw originating from a privilege control class in the Gallery application, enabling local attacker access that can lead to confidentiality impac...

CVE-2024-51527

Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-51523

Technical details (affected products, versions, root cause, exploits) are not provided in the connected documents; monitor for updates from Huawei and security advisories.

CVE-2024-51523

Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-51523

Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality...