PT-2023-15667

Name of the Vulnerable Software and Affected Versions Bundle management module affected versions not specified Description The issue is related to the lack of authentication and control mechanisms in some APIs of the bundle management module. This could potentially affect data confidentiality...

CVE-2022-48288: Missing Authentication for Critical Function

The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...

Huawei HarmonyOS 访问控制错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an issue in the WMS module where the interface is not properly authenticated, which cou...

Cross site scripting

A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...

maccms10 跨站脚本漏洞

maccms10 is magicblack open source PHP+MYSQL environment using a set of perfect and powerful rapid site-building system . maccms10 v2022.1000.3032 version of cross-site scripting XSS vulnerabilities. A cross-site scripting XSS vulnerability exists in maccms10 version v2022.1000.3032, which...

CVE-2022-46762: Protection Mechanism Failure

The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-44870

A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...

CVE-2022-46762

The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-44870: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...

PT-2023-15020 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The memory management module has a logic bypass issue. Successful exploitation may affect data confidentiality. Recommendations: At the moment, there is no information about a newer...

CVE-2022-45966

here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...

ClassCMS 代码问题漏洞

ClassCMS is a simple, flexible, secure and easy-to-expand content management system in China. A security vulnerability exists in ClassCMS version 3.5, which originates from an arbitrary file upload in the file management functional module...

CVE-2022-46312

The application management module has a vulnerability in permission verification. Successful exploitation of this vulnerability causes unexpected clear of device applications...

PT-2022-27804 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Application management module affected versions not specified Description: The issue is related to a vulnerability in permission verification within the application management module. This vulnerability can be exploited to cause an unexpected...

CVE-2022-46312: Improper Authorization

The application management module has a vulnerability in permission verification. Successful exploitation of this vulnerability causes unexpected clear of device applications...

ZOHO ManageEngine Mobile Device Manager Plus 安全漏洞

ZOHO ManageEngine Mobile Device Manager Plus is an enterprise mobile device management MDM software from ZOHO, Inc. It can be used to manage and protect Apple, Android, Windows and Chrome OS devices. A security vulnerability exists in ZOHO ManageEngine Mobile Device Manager Plus versions prior to...

CVE-2021-46852: Missing Authentication for Critical Function

The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-46852

The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in the Huawei HarmonyOS DDMP/ODMF module, which can be exploited by attackers to cause a denial of service...

Huawei HarmonyOS 访问控制错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a logical bypass vulnerability in its memory management module resulting in compromised...