Information disclosure

There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216C00E214R2P1. The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful...

CVE-2019-5222

There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216C00E214R2P1. The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful...

prctl_set_vma_anon_name

An elevation of privilege vulnerability in the kernel could enable a local malicious application to execute arbitrary code in the kernel...

Nextcloud: Code injection in macOS Desktop Client

Vulnerability description I've identified a code injection vulnerability in your macOS desktop client. Any malicious application, running with standard user permissions is able to exploit this vulnerability and execute code in your application's context. Requirements In order to exploit this...

(0Day) Alibaba Alipay URL Scheme Handling Vulnerability

This vulnerability allows local attackers to modify requests on affected installations of Alibaba Alipay. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of URL...

CVE-2019-5219

There is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.181C00E87R2P20T8. An attacker tricks the user into installing a malicious application, which makes multiple processes operate the same resource at the same time. Successful...

CVE-2019-5216

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156C00E156R2P14T8, Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156C00E156R1P20T8 and Honor Play smartphones versions earlier than Cornell-AL00A...

CVE-2019-5242

There is a code execution vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to execute malicious code and read/write...

Design/Logic Flaw

There is a use after free vulnerability on certain driver component in Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.167C00E85R2P20T8. An attacker tricks the user into installing a malicious application, which make the software to reference memory after it has been freed...

Race condition

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156C00E156R2P14T8, Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156C00E156R1P20T8 and Honor Play smartphones versions earlier than Cornell-AL00A...

CVE-2019-5305

The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159C185 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which could trigger double free and cause a...

Apple macOS Mojave APFS Component Code Execution Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers.APFS is one of the file system components for Apple devices. A security vulnerability exists in the APFS component of Apple macOS Mojave versions prior to 10.14.4. The vulnerability can be exploited by ...

DLL Hijacking Vulnerability in Display Control Remote HMI

Shenzhen Xianzhong Technology is a national high-tech enterprise specializing in the research and development, production, sales and service of Industry 4.0 core products. There is a dll hijacking vulnerability in Remote HMI. Attackers can construct a malicious application placed in a specific...

Design/Logic Flaw

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which...

CVE-2015-1327

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which...

CVE-2015-1327

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which...

Power Management Input Validation Vulnerability in Multiple Apple Products

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. power management is one of the power management components. Power Management is one of the power...

Apple macOS Mojave AppleGraphicsControl Buffer Overflow Vulnerability

Apple macOS Mojave is a dedicated operating system developed by Apple for Mac computers.AppleGraphicsControl is an integrated graphics driver. A buffer overflow vulnerability exists in the AppleGraphicsControl component in Apple macOS Mojave versions prior to 10.14.4. An attacker can exploit this...

Apple iOS, tvOS and macOS Mojave Siri API Vulnerabilities

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple macOS Mojave is a specialized operating system developed for Mac computers.Siri is a voice control component of it. A security vulnerability exists in the processing of command requests f...

Apple macOS Mojave Security Out-of-Bounds Read Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers.Security is one of the security components of the system. An out-of-bounds read vulnerability exists in the Security component of Apple macOS Mojave versions prior to 10.14.4. An attacker can exploit th...