CVE-2024-32995

CVE-2024-32995 describes a denial-of-service in the Huawei HarmonyOS/AMS module. Documents consistently cite an availability impact and a DoS condition in the AMS component, with CVSSv3.1 indicators showing a Local attack vector, Low attack complexity, No privileges required (higher impact on ava...

CVE-2023-52719

Technical details about CVE-2023-52719 are not publicly provided in the supplied documents. References mention a privilege-escalation in the PMS module but do not disclose affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2024-32993

CVE-2024-32993 is tied to Huawei HarmonyOS/EMUI memory module out-of-bounds access. The root cause is an out‑of‑bounds memory access in the memory module, with the impact stated as availability loss. Public entries show local attack vectors (nvd: LOCAL, low complexity; privileged access low; user...

CVE-2023-52383

The CVE-2023-52383 entry describes a double-free vulnerability in Huawei’s HarmonyOS/EMUI RSMC module that affects availability. Connected sources identify affected software as Huawei HarmonyOS/EMUI, with vulnerable component being the RSMC module. Mitigation guidance from PT-2024-14573 indicates...

CVE-2024-32992

The CVE-2024-32992 entry concerns an insufficient verification vulnerability in the baseband module, with availability impact. Connected documents consistently reference Huawei HarmonyOS/EMUI baseband context and note the vulnerability’s impact as Availability, with a CVSSv3.1 score of 7.5 (Netwo...

CVE-2024-32991

CVE-2024-32991 affects the wpa_supplicant module with a permission verification vulnerability that can impact availability. Connected documents confirm the issue in Huawei HarmonyOS environments and reiterate the vulnerability in the wpa_supplicant component; however, explicit affected versions, ...

CVE-2024-32990

CVE-2024-32990 describes a permission verification vulnerability in the system sharing pop-up module affecting Huawei HarmonyOS/Huawei EMUI. The underlying issue is insufficient permission checks in that module, with impact noted as availability loss upon successful exploitation. Connected source...

CVE-2024-32989

CVE-2024-32989 concerns Huawei System Sharing Pop-Up Module (Huawei HarmonyOS/EMUI). The connected PT-2024-25036 entry and CNVD/CNNVD family records indicate an insufficient verification vulnerability in the system sharing pop-up module, with impact on availability if exploited. Concrete affected...

CVE-2024-4560

CVE-2024-4560 affects the Kognetiks Chatbot for WordPress plugin. It reveals unauthenticated arbitrary file upload via chatbot_chatgpt_upload_file_to_assistant, in all versions up to 1.9.9, due to missing file-type validation. This could lead to remote code execution on the affected site. A patch...

CVE-2024-3055

CVE-2024-3055 affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress. Time-based SQL Injection in the id parameter exists in all versions up to 1.5.102 due to insufficient escaping and lack of prepared SQL in the query. Authenticated attackers with contributor ac...

CVE-2024-4213

CVE-2024-4213 concerns the WordPress plugin Shopping Cart & eCommerce Store (WP-EasyCart). The vulnerability is a case of Sensitive Information Exposure via the plugin’s order report functionality in all versions up to 5.6.4, allowing unauthenticated attackers to extract order details and other P...

CVE-2024-4413

The CVE-2024-4413 entry concerns the Hotel Booking Lite plugin for WordPress, vulnerable to unauthenticated PHP Object Injection (deserialization) up to version 4.11.1. The vulnerability could allow an attacker to inject a PHP object; while no POP chain is known in the plugin itself, a POP chain ...

CVE-2024-27460

CVE-2024-27460 affects HP Plantronics Hub up to version 3.25.1, including the updater component. The Red Hat/NVD entries confirm a privilege-escalation vulnerability in the Plantronics Hub updater that can be triggered by a low-privileged user. Public PoCs and exploit listings describe an Arbitra...

CVE-2024-4735

The CVE-2024-4735 entry describes a cross-site scripting vulnerability in Campcodes Legal Case Management System 1.0. The issue arises from manipulating the task_subject argument in the /admin/tasks endpoint, enabling remote exploitation with an publicly disclosed exploit. Affected functionality ...

CVE-2024-34079

CVE-2024-34079 affects the octo-sts GitHub App (Security Token Service for the GitHub API). The issue enables excessive resource consumption, potentially causing denial of service when handling high traffic volumes. Public sources describe a DoS risk from unbounded resource usage or missing input...

CVE-2024-4729

CVE-2024-4729 affects Campcodes Legal Case Management System 1.0. The vulnerability is a cross-site scripting flaw caused by manipulation of the name argument in /admin/expense-type. It may be exploited remotely. Some sources indicate exploitation was disclosed. There is no vendor-provided patch ...

CVE-2024-4701

CVE-2024-4701 (Genie) is a path traversal vulnerability in Netflix Genie prior to 4.3.18. The issue arises from Genie’s REST API accepting a user-supplied filename during file uploads, enabling an attacker to break out of the attachment storage path and write arbitrary files to the filesystem, po...

CVE-2024-4728

The CVE-2024-4728 entry concerns Campcodes Legal Case Management System v1.0. The vulnerability is a cross-site scripting flaw in the /admin/court endpoint, triggered by manipulating the court_name parameter. Exploitation is possible remotely and the vulnerability has been publicly disclosed. Roo...

CVE-2024-4727

Campcodes Legal Case Management System 1.0 is affected by a cross-site scripting vulnerability in the /admin/court-type file, caused by manipulation of the argument court_name. This could enable remote attacker execution of scripts in a victim’s browser. The vulnerability is publicly disclosed (V...

CVE-2024-22345

CVE-2024-22345 affects IBM TXSeries for Multiplatforms 8.2. The vulnerability arises from transmitting or storing authentication credentials using an insecure method, allowing potential unauthorized interception or retrieval. Multiple sources (Red Hat, IBM Security Bulletin, PTSecurity, CVE listi...