CVE-2019-5241: Undefined Security Weakness

There is a privilege escalation vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege...

CVE-2019-5242: Undefined Security Weakness

There is a code execution vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to execute malicious code and read/write...

CVE-2019-5214: Use After Free

There is a use after free vulnerability on certain driver component in Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.167C00E85R2P20T8. An attacker tricks the user into installing a malicious application, which make the software to reference memory after it has been freed...

CVE-2019-5216: Concurrent Execution using Shared Resource with Improper Synchronization

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156C00E156R2P14T8, Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156C00E156R1P20T8 and Honor Play smartphones versions earlier than Cornell-AL00A...

Apple macOS Mojave APFS Component Code Execution Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers.APFS is one of the file system components for Apple devices. A security vulnerability exists in the APFS component of Apple macOS Mojave versions prior to 10.14.4. The vulnerability can be exploited by ...

DLL Hijacking Vulnerability in Display Control Remote HMI

Shenzhen Xianzhong Technology is a national high-tech enterprise specializing in the research and development, production, sales and service of Industry 4.0 core products. There is a dll hijacking vulnerability in Remote HMI. Attackers can construct a malicious application placed in a specific...

Design/Logic Flaw

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which...

CVE-2015-1327

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which...

CVE-2015-1327

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which...

Apple iOS and Apple macOS Mojave Contacts Elevation of Privilege Vulnerability

Apple iOS and Apple macOS Mojave are both products of Apple Inc. Apple iOS is an operating system for mobile devices. apple macOS Mojave is a specialized operating system for Mac computers. contacts is a component of contacts. A security vulnerability exists in the Contacts component in Apple iOS...

Apple iOS, tvOS and macOS Mojave Kernel Memory Initialization Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple macOS Mojave is a specialized operating system developed for Mac computers.Kernel is a kernel component. A security vulnerability exists in the Kernel component in Apple iOS version...

Apple macOS Mojave Security Out-of-Bounds Read Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers.Security is one of the security components of the system. An out-of-bounds read vulnerability exists in the Security component of Apple macOS Mojave versions prior to 10.14.4. An attacker can exploit th...

Apple iOS, tvOS and macOS Mojave Siri API Vulnerabilities

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple macOS Mojave is a specialized operating system developed for Mac computers.Siri is a voice control component of it. A security vulnerability exists in the processing of command requests f...

Apple macOS Mojave AppleGraphicsControl Buffer Overflow Vulnerability

Apple macOS Mojave is a dedicated operating system developed by Apple for Mac computers.AppleGraphicsControl is an integrated graphics driver. A buffer overflow vulnerability exists in the AppleGraphicsControl component in Apple macOS Mojave versions prior to 10.14.4. An attacker can exploit this...

Power Management Input Validation Vulnerability in Multiple Apple Products

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. power management is one of the power management components. Power Management is one of the power...

Huawei Hima-AL00B Code Execution Vulnerability

The Huawei Hima-AL00B is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in the Huawei Hima-AL00B HMA-AL00C00B175 previous version, which stems from a problem in the logic of signature verification. The vulnerability can be exploited to execute arbitrary code ...

CVE-2019-6231

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to read restricted memory...

CVE-2019-6231

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to read restricted memory...

CVE-2019-6208

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes...

Input validation

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout...