CVE-2019-5217: Improper Restriction of Excessive Authentication Attempts

There is an information disclosure vulnerability on Mate 9 Pro Huawei smartphones versions earlier than LON-AL00B9.0.1.150 C00E61R1P8T8. An attacker could view the photos after a series of operations without unlocking the screen lock. Successful exploit could cause an information disclosure...

CVE-2019-5244: Improper Input Validation

Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361C636 versions have an information leak vulnerability due to the lack of input validation. An attacker tricks the user who has root privilege to install an application on the smart phone, and the application can read some process...

Fedora Update for mate-user-admin FEDORA-2019-27e7b92407

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 29 Update: mate-user-admin-1.4.1-2.fc29

Mate User management tool...

[SECURITY] Fedora 30 Update: mate-user-admin-1.4.1-2.fc30

Mate User management tool...

PT-2019-2403

Name of the Vulnerable Software and Affected Versions Huawei Mate 9 Pro affected versions not specified Description The issue is related to the init agent2TA context function in the TEEOS.img file, specifically at offset 0x13949C, within the SMC handler of the TEE OS Trusted Core operating system...

PT-2019-2406

Name of the Vulnerable Software and Affected Versions Huawei Mate 9 Pro affected versions not specified Description The issue is related to a file named TEEOS.img, specifically at offset 0x158608, in the SMC handler for the GLOBAL CMD ID LOAD SECURE APP command of the TEE OS Trusted Core operatin...

PT-2019-2404

Name of the Vulnerable Software and Affected Versions Huawei Mate 9 Pro affected versions not specified Description The issue is related to the getLoginInformation function of the SMC handler in the TEE OS Trusted Core operating system, specifically with the GLOBAL CMD ID OPEN SESSION command. It...

PT-2019-2405

Name of the Vulnerable Software and Affected Versions Huawei Mate 9 Pro affected versions not specified Description The issue is related to the lack of input validation in the SMC handler for the GLOBAL CMD ID NEED LOAD APP command in the TEE OS Trusted Core operating system. This could allow a...

PT-2019-2408

Name of the Vulnerable Software and Affected Versions Huawei Mate 9 Pro affected versions not specified Description The issue is related to the start TA task function in the TEE OS Trusted Core operating system's SMC handler, which is part of the Huawei Mate 9 Pro's firmware. It involves the...

PT-2019-2407

Name of the Vulnerable Software and Affected Versions Huawei Mate 9 Pro affected versions not specified Description The issue is related to the map ns operation SMC handler function in the TEE OS Trusted Core operating system of the Huawei Mate 9 Pro mobile phone's firmware. It involves the...

Apache UNO LibreOffice Version: 6.1.2 OpenOffice 4.1.6 API - Remote Code Execution

Apache UNO LibreOffice Version: 6.1.2 OpenOffice 4.1.6 API - Remote Code Execution """ Exploit Title: Apache UNO API RCE Date: 2018-09-18 Exploit Author: sud0woodo Vendor Homepage: https://www.apache.org/ Software Link: https://www.openoffice.org/api/ Version: LibreOffice Version: 6.1.2 /...

Huawei Mate 9 Pro Information Disclosure Vulnerability

Huawei Mate 9 Pro is a smartphone from Chinese company Huawei Huawei. An information disclosure vulnerability exists in Huawei Mate 9 Pro LON-L29C prior to version 8.0.0.361 C636, which stems from a lack of input checking. The vulnerability can be exploited by an attacker to read process...

Huawei Mate10 Reuse After Release Vulnerability

Huawei Mate10 is a smartphone product from Chinese company Huawei Huawei. A post-release reuse vulnerability exists in the driver in versions prior to Huawei Mate10 ALP-AL00B 9.0.0.167 C00E85R2P20T8, which can be exploited by an attacker to cause a denial of service by tricking a user into...

CVE-2018-20681

mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control applications. By unplugging and re-plugging or power-cycling external output devices such as additionally attached graphical outputs via HDMI, VGA, DVI, etc...

CVE-2018-20681

mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control applications. By unplugging and re-plugging or power-cycling external output devices such as additionally attached graphical outputs via HDMI, VGA, DVI, etc...

CVE-2018-20681

mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control applications. By unplugging and re-plugging or power-cycling external output devices such as additionally attached graphical outputs via HDMI, VGA, DVI, etc...

Code injection

mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control applications. By unplugging and re-plugging or power-cycling external output devices such as additionally attached graphical outputs via HDMI, VGA, DVI, etc...

UBUNTU-CVE-2018-20681

mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control applications. By unplugging and re-plugging or power-cycling external output devices such as additionally attached graphical outputs via HDMI, VGA, DVI, etc...

CVE-2018-20681

The CVE-2018-20681 entry concerns mate-screensaver before 1.20.2 in MATE Desktop Environment. The vulnerability allows physically proximate attackers to view the screen content of a screensaver-locked session and possibly control applications by unplugging/re-plugging or power-cycling external ou...