Huawei P30 has a security vulnerability

Huawei P30 is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in Huawei P30 versions prior to 10.0.0.173 C00E73R1P11. An attacker can exploit the vulnerability by tricking users into installing a malicious application to bypass authentication and perform illegal...

CVE-2020-1788

Honor V30 smartphones with versions earlier than 10.0.1.135C00E130R4P1 have an improper authentication vulnerability. Certain applications do not properly validate the identity of another application who would call its interface. An attacker could trick the user into installing a malicious...

Authentication flaw

Honor V30 smartphones with versions earlier than 10.0.1.135C00E130R4P1 have an improper authentication vulnerability. Certain applications do not properly validate the identity of another application who would call its interface. An attacker could trick the user into installing a malicious...

CVE-2020-1788

Honor V30 smartphones with versions earlier than 10.0.1.135C00E130R4P1 have an improper authentication vulnerability. Certain applications do not properly validate the identity of another application who would call its interface. An attacker could trick the user into installing a malicious...

CVE-2020-1788: Improper Authentication

Honor V30 smartphones with versions earlier than 10.0.1.135C00E130R4P1 have an improper authentication vulnerability. Certain applications do not properly validate the identity of another application who would call its interface. An attacker could trick the user into installing a malicious...

PT-2020-15059

Name of the Vulnerable Software and Affected Versions Honor V30 versions prior to 10.0.1.135C00E130R4P1 Description The issue is related to improper authentication, where certain applications do not properly validate the identity of other applications that call their interface. This could allow a...

Security Advisory - Improper Authentication Vulnerability in Smartphones

There is an improper authentication vulnerability in smartphones. Due to improperly validate of certain application, an attacker should trick the user into installing a malicious application to exploit this vulnerability. Successful exploit could allow the attacker to bypass the authentication to...

CVE-2020-1785

Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of...

Denial of service

Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of...

CVE-2020-1785

Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of...

PT-2020-15056

Name of the Vulnerable Software and Affected Versions Huawei Mate 10 Pro version affected versions not specified Honor V10 version affected versions not specified Honor 10 version affected versions not specified Huawei Nova 4 version affected versions not specified Description The issue is relate...

Mail.ru: [myMail Android] Access to protected app components via RegistrationPhoneActivity

RegistrationPhoneActivity of My.com MyMail application for Android could be locally exploited by malicious application to access internal activities as was demonstrated by spoofing logon screen to send authentication request to arbitrary site...

Unspecified Vulnerability in Apple macOS Mojave DesktopServices Component

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers.DesktopServices is one of the desktop services components. A security vulnerability exists in the DesktopServices component in Apple macOS Mojave versions prior to 10.14.5. The vulnerability can be exploited...

Apple iOS ReplayKit Component Unauthorized Access Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices.ReplayKit is one of the screen recording components. A security vulnerability exists in the ReplayKit component in Apple iOS versions prior to 12.2. The vulnerability can be exploited by an attacker to gain access to the speak...

PT-2019-17949

Name of the Vulnerable Software and Affected Versions Rakuma App for Android versions 7.15.0 and earlier Rakuma App for iOS versions 7.16.4 and earlier Description The issue allows an attacker to bypass authentication and obtain a user's authentication information through a malicious application...

CVE-2019-6024: Insufficiently Protected Credentials

Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier allows an attacker to bypass authentication and obtain the user's authentication information via a malicious application created by the third party...

CVE-2019-8802

A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15.1. A malicious application may be able to gain root privileges...

CVE-2019-8770

The issue was addressed with improved permissions logic. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to access recent documents...

CVE-2019-8755

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to determine kernel memory layout...

CVE-2019-8698

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in iOS 12.4, tvOS 12.4. A malicious application may be able to restrict access to websites...