CVE-2025-20626

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios...

CVE-2025-20081

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios...

CVE-2025-0587

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios...

CVE-2025-24301

OpenHarmony vulnerability CVE-2025-24301 affects v5.0.2 and earlier, where a use-after-free in pre-installed apps enables local code execution by a restricted attacker. The issue is described as a local escalation/vector with a high impact (CVE metrics show local access, high confidentiality/inte...

CVE-2025-23414

CVE-2025-23414 affects OpenHarmony v5.0.2 and earlier. A use-after-free in pre-installed apps allows a local attacker to achieve arbitrary code execution in a restricted context. The NVD metrics indicate a high impact (C/H, I/H, A/H) with local access, low privileges required, and no user interac...

CVE-2025-23240

OpenHarmony CVE-2025-23240 affects OpenHarmony v5.0.2 and earlier. The RedHat/NVD entries describe a local arbitrary code execution via an out-of-bounds write in pre-installed apps, originating from the Arkcompiler Ets Runtime component. Impact is described as high for confidentiality, integrity,...

CVE-2025-22835 Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

CVE-2025-20626

CVE-2025-20626 affects OpenHarmony v5.0.2 and earlier. The reported issue is a use-after-free in the Arkcompiler Ets Runtime that allows a local attacker to execute arbitrary code within pre-installed apps, in restricted scenarios. NVD/AI-derived metrics indicate a high-impact potential for confi...

OpenHarmony 缓冲区错误漏洞

OpenHarmony is an open source project for a kind of Hongmeng operating system from the China OpenAtom OpenAtom Foundation. A buffer error vulnerability exists in OpenHarmony 5.0.2 and earlier versions, which stems from an out-of-bounds write and could lead to arbitrary code execution in...

OpenHarmony 缓冲区错误漏洞

OpenHarmony is an open source project for a kind of Hongmeng operating system from the China OpenAtom OpenAtom Foundation. A buffer error vulnerability exists in OpenHarmony 5.0.2 and earlier versions, which stems from an out-of-bounds write and could lead to arbitrary code execution in...

OpenHarmony 代码问题漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom OpenAtom Foundation. A code issue vulnerability exists in OpenHarmony 5.0.2 and prior versions, which stems from a null pointer dereference that could lead to arbitrary code execution in pre-installed...

Adobe Substance 3D Stager Installed (Windows)

Binary data adobesubstance3dstagerwininstalled.nbin...

Amazon AppStream 2.0 Installed (macOS)

Binary data amazonappstream2macinstalled.nbin...

GHSA-4HMR-39VP-XFRR Moodle has an arbitrary file read risk through pdfTeX

Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available such as those with TeX Live installed...

CVE-2025-26525 Arbitrary file read risk through pdfTeX

Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available such as those with TeX Live installed...

CVE-2025-26525 Arbitrary file read risk through pdfTeX

Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available such as those with TeX Live installed...

CVE-2022-21251

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Instance Main. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base...

CVE-2024-38386

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-37077

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

The vulnerability of the Wazuh intrusion detection and prevention agent, related to access control errors, allows intruders to increase their privileges.

The vulnerability of the Wazuh intrusion detection and prevention agent is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges by placing a specially crafted DLL file in the directory where the installed software resides...