CVE-2023-46079

CVE-2023-46079 affects the WordPress Ashe Extra plugin (

CVE-2023-45828

CVE-2023-45828 affects the WordPress RumbleTalk Live Group Chat plugin (versions up to and including 6.2.5). The issue is a Missing/Incorrectly Configured Authorization vulnerability (Broken Access Control) in the plugin’s handling of AJAX/authorization checks (handleRequest and related flows), a...

CVE-2023-46073

CVE-2023-46073 (DX Delete Attached Media) is a WordPress plugin vulnerability in which versions <= 2.0.5.1 expose Broken Access Control (Missing Authorization) via CSRF/bypass scenarios. The Patchstack entry confirms affected software (DX Delete Attached Media plugin), the root cause (broken a...

CVE-2023-45766

CVE-2023-45766 is a WordPress Poll Maker plugin vulnerability (≤ 4.7.1) due to missing authorization checks that could allow an unauthenticated user to access or manipulate data. Root cause: broken access control in the plugin’s poll-related functionality. A fixed version, Poll Maker 4.7.2, exist...

CVE-2023-45760

CVE-2023-45760: wpDiscuz

CVE-2023-45110

CVE-2023-45110 concerns Bold Timeline Lite (WordPress plugin) with a Missing Authorization/Broken Access Control vulnerability present up to version

CVE-2023-45101

CVE-2023-45101 affects CusRev Customer Reviews for WooCommerce (WordPress) up to version 5.36.0. The issue is described as Missing Authorization / Broken Access Control, arising from incorrectly configured access control security levels. Connected sources indicate a low-severity impact (CVSS 4.3,...

CVE-2023-48775

CVE-2023-48775 affects the WordPress WP Cleanfix plugin, specifically versions through 5.6.2. The root cause is a Missing Authorization / Broken Access Control vulnerability in the plugin’s access checks, enabling exploitation due to incorrectly configured security levels. The CVSSv3.1 base score...

CVE-2023-52718

CVE-2023-52718 refers to a connection hijacking vulnerability affecting some Huawei home routers (e.g., WS8700 and other models). The issue is linked to insufficient input validation in Huawei’s firmware, enabling an attacker with adjacent access to cause Denial of Service or information leakage....

CVE-2023-7263

CVE-2023-7263 describes a path traversal vulnerability in Huawei HarmonyOS AILife-related components, notably Huawei home music system products and the HarmonyOS AILife Audio Service platform. The underlying issue allows an attacker to delete files or modify file permissions via crafted requests....

CVE-2023-7266

Huawei CVE-2023-7266 concerns a connection hijacking vulnerability affecting some Huawei home routers. Connected docs identify affected products as Huawei TC7001-10, WS7200-10, and WS7206-10 (and related models in Huawei materials). The root cause is described as a session handling flaw that enab...

CVE-2020-1822

CVE-2020-1822 corresponds to Huawei COPS protocol implementations with multiple OOB read vulnerabilities in the decoding function when processing incoming data packets. The issue can disrupt service on affected devices. The connected Red Hat CVE records confirm the same family (CVE-2020-1818…1824...

CVE-2020-1821

CVE-2020-1821 concerns Huawei devices implementing the Common Open Policy Service (COPS) protocol. The vulnerability is an out-of-bounds read in the COPS decoding function when processing an incoming data packet, potentially causing a disruption of service on affected devices. The issue is part o...

CVE-2020-1820

CVE-2020-1820 is part of seven Huawei-related OOB read vulnerabilities in the COPS protocol implementation. The Huawei PSIRT advisory describes multiple decoding functions that may read beyond bounds when processing an incoming COPS data packet, potentially disrupting service on affected devices....

CVE-2020-1819

Huawei devices implementing the Common Open Policy Service (COPS) protocol are affected by multiple OOB read vulnerabilities in the COPS decoding function. The issue can lead to service disruption when processing certain data packets. The CVE family includes CVE-2020-1818 through CVE-2020-1824, i...

CVE-2020-1818

The connected Red Hat/Huawei entries describe CVE-2020-1818 (and related CVEs 2020-1819 to 1824) as multiple out-of-bounds read vulnerabilities in Huawei devices' Common Open Policy Service (COPS) protocol implementation. The root cause is an out-of-bounds read in the decoding function when proce...

CVE-2020-9236

Huawei FusionCompute is affected by CVE-2020-9236 (improper interface design). The vulnerability stems from a design flaw in the module interface that can allow attackers to perform malicious operations and compromise the module service. Affected product/version: Huawei FusionCompute, with versio...

CVE-2020-9222

CVE-2020-9222 affects Huawei FusionCompute. The vulnerability is a privilege-escalation issue caused by insufficient verification of specific files during deserialization, enabling local attackers to elevate permissions. Affected product/component: Huawei FusionCompute; root cause: improper deser...

CVE-2020-9211

CVE-2020-9211 refers to an out-of-bounds read/write vulnerability in Huawei smartphones. The issue arises because a module does not sufficiently verify input, enabling denial of service through crafted configuration changes. Affected product: Huawei smartphone software; root cause: inadequate inp...

CVE-2020-9210

CVE-2020-9210 affects Huawei Myna devices with an insufficient integrity check in a module, enabling attackers to install malware via a physical scenario and potentially disrupt normal service. The root cause is a lack of adequate integrity verification in a specific workflow (HWPSIRT-2020-00145)...