CVE-2019-5295

Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125C00E125R2P14T8 have an authorization bypass vulnerability. Due to improper authorization implementation logic, attackers can bypass certain authorization scopes of smart phones by performing specific operations. This...

CVE-2019-5216

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156C00E156R2P14T8, Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156C00E156R1P20T8 and Honor Play smartphones versions earlier than Cornell-AL00A...

Authorization

Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125C00E125R2P14T8 have an authorization bypass vulnerability. Due to improper authorization implementation logic, attackers can bypass certain authorization scopes of smart phones by performing specific operations. This...

CVE-2019-5295

Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125C00E125R2P14T8 have an authorization bypass vulnerability. Due to improper authorization implementation logic, attackers can bypass certain authorization scopes of smart phones by performing specific operations. This...

CVE-2019-5295

Huawei Honor V10 smartphones running Berkeley-AL20 9.0.0.125 (C00E125R2P14T8) or older are affected by an authorization bypass vulnerability due to improper authorization logic that can allow bypassing certain authorization scopes and performing operations beyond the intended scope. The issue, id...

CVE-2019-5216

CVE-2019-5216 is a race-condition vulnerability on Huawei smartphone families (Honor V10, Honor 10, Honor Play) with affected builds earlier than Berkeley-AL20 9.0.0.156, Columbia-AL10B 9.0.0.156, and Cornell-AL00A 9.0.0.156. An attacker entices the user to install a malicious app, causing multip...

Huawei Honor V10, 10 and Play Competitive Conditions Vulnerability

The Huawei Honor V10, 10 and Play are smartphone products from the Chinese company Huawei Huawei. The drivers in the Huawei Honor V10, 10 and Play contain a competitive condition vulnerability that can be exploited by an attacker to execute malicious code by tricking a user into installing a...

Huawei Honor 7A and Honor 9 Lite Information Disclosure Vulnerability

The Huawei Honor 7A and Honor 9 Lite are both smartphone products from the Chinese company Huawei Huawei. An information disclosure vulnerability exists in Huawei Honor 7A prior to version 8.0.0.195C00 and Huawei Honor 9 Lite prior to version 8.0.0.182C01. The vulnerability can be exploited to...

CVE-2018-7939

Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the versions before CAM-L03C605B143CUSTC605D008, the versions before CAM-L21C10B145, the versions before CAM-L21C185B156, the versions before CAM-L21C223B133, the versions before...

CVE-2018-7939

CVE-2018-7939 specifies a Factory Reset Protection (FRP) bypass vulnerability in multiple Huawei/Honor smartphones (e.g., G9 Lite, Honor 5A/6X/8 and various build versions) where enabling TalkBack during FRP reconfiguration disables the boot wizard and bypasses FRP. Affected builds are listed in ...

CVE-2018-7939

Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the versions before CAM-L03C605B143CUSTC605D008, the versions before CAM-L21C10B145, the versions before CAM-L21C185B156, the versions before CAM-L21C223B133, the versions before...

FRP bypass vulnerability in multiple Huawei phones (CNVD-2018-17697)

Huawei G9 Lite and Honor 5A are smartphone products of Huawei, a Chinese company. The FRP bypass vulnerability exists in a number of Huawei handsets, where an attacker can turn off the boot wizard by turning on the talkback function during the FRP reset process, resulting in a bypass of the FRP...

labor-honor.empreendimentos.com.pt XSS vulnerability

Open Bug Bounty ID: OBB-629188 Description| Value ---|--- Affected Website:| labor-honor.empreendimentos.com.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

CVE-2017-8154

The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle MITM vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may...

CVE-2017-8154

The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle MITM vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may...

Design/Logic Flaw

The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle MITM vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may...

CVE-2017-8154

The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle MITM vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may...

CVE-2017-8154

The CVE-2017-8154 entry concerns Huawei/Honor devices (Themes App on Honor 8 Lite) with software versions prior to Prague-L31C576B172, Prague-L31C530B160, and Prague-L31C432B180. The underlying issue is an MITM vulnerability arising from the use of insecure HTTP to download themes, enabling an at...

Huawei Honor 8 Youth Man-in-the-Middle Attack Vulnerability

Huawei Honor 8 Youth is a smartphone device. A man-in-the-middle attack vulnerability exists in Huawei Honor 8 Youth Edition. Since the theme manager uses an insecure http protocol to download certain theme packages, an attacker may exploit this vulnerability to corrupt the downloaded theme...

Huawei Honor 8 Bdat Driver Integer Overflow Vulnerability

Huawei Honor 8 Youth is a smartphone device. An integer overflow vulnerability exists in the Huawei Honor 8 Youth Edition Bdat driver. Due to a lack of parameter checking, an attacker can exploit the vulnerability to trick a user into installing a malicious application and executing it with...