CVE-2024-27895

CVE-2024-27895 concerns Huawei HarmonyOS, specifically a permission-control issue in the window module that can affect confidentiality. The available connected documents indicate the vulnerability stems from a privilege-related weakness in the window module, with HIGH impact per CVSS metrics (C: ...

CVE-2023-52386

CVE-2023-52386 is described across multiple sources as an out-of-bounds write vulnerability in the RSMC module affecting Huawei EMUI and HarmonyOS. The available documents consistently indicate an impact to availability, with network attack vector, low attack complexity, no privileges required, a...

CVE-2023-52554

The CVE-2023-52554 entry concerns Huawei HarmonyOS Bluetooth module permission control vulnerability. Affects the Bluetooth component; root cause described as improper permission control. Potential impact is service confidentiality leakage if exploited. The provided documents do not specify affec...

CVE-2023-52553

CVE-2023-52553 is described across multiple sources as a race condition vulnerability in the Wi‑Fi module affecting Huawei HarmonyOS and EMUI. The impact is listed as availability loss if exploited. Documents consistently reference the Wi‑Fi module as the vulnerable component and indicate a netwo...

CVE-2024-31375

Technical details about CVE-2024-31375 are not provided in the connected documents. Available sources mention a missing authorization issue in WP2LEADS but do not disclose affected versions, remediation, exploit specifics, or vendor confirmations.

CVE-2023-52552

CVE-2023-52552 affects Huawei EMUI and Huawei HarmonyOS (power module). The issue is an input validation vulnerability originating from an input validation class in the power module. The vulnerability is described as affecting usability, with NO details provided on exact vulnerable component vers...

CVE-2023-52551

CVE-2023-52551 is described across multiple sources as a data verification error in Huawei HarmonyOS/EMUI kernel module, leading to a confidentiality impact. The core issue is a data validation error in the kernel module, with the CVSS indicating local attack vector, low privileges required, no u...

CVE-2023-52550

CVE-2023-52550 describes a data verification error in the Huawei HarmonyOS kernel module. The impact is confidentiality loss with a CVSS 3.1 base score of 7.5 (Network attack vector, Low attack complexity, No user interaction, No privileges required, Scope unchanged; Confidentiality impact High)....

CVE-2023-52545

Huawei HarmonyOS/EMUI Calendar app suffers a stray permissions vulnerability (undefined permissions) that can affect availability. Connected CNVD/NVD entries describe the issue as originating from the calendar app, enabling a privilege-related flaw without user interaction; CVSS v3.1 indicates ne...

CVE-2023-52544

CVE-2023-52544 is a file path verification bypass in Huawei HarmonyOS/EMUI email module. The root cause is improper file path handling within the email component, leading to potential confidentiality impact. CVSSv3.1 metrics indicate a low-severity, network-scope issue with low privileges and no ...

CVE-2024-31357

CVE-2024-31357 is a Stored XSS vulnerability in BdThemes Ultimate Store Kit Elementor Addons (and related bundles) affecting versions up to 1.5.2. The issue is documented in multiple connected records (including RH/Red Hat and ENISA context) and Wordfence details confirm the vulnerability exists ...

CVE-2023-52359

The CVE-2023-52359 entry concerns a permission verification issue in certain APIs of the ActivityTaskManagerService module, affecting Huawei/HarmonyOS and EMUI. Root cause: a privilege validation flaw in the ActivityTaskManagerService APIs. Impact: exploitation could lead to a denial of service, ...

CVE-2023-52543

CVE-2023-52543 corresponds to a privilege check vulnerability in the HarmonyOS/EMUI system module. The CNVD entry describes a privilege checking flaw in a system module that could be exploited to affect usability. The NVD/NVD-derived references list the vulnerability as a permission verification ...

CVE-2023-52542

CVE-2023-52542 affects Huawei HarmonyOS (and EMUI) with a privilege-check vulnerability in a system module. The root cause is a flaw in the system module’s privilege verification, potentially allowing an attacker to impact usability (per CNVD/NVD summaries). The available documents do not provide...

CVE-2023-52541

CVE-2023-52541 is described as an authentication vulnerability in the API for app pre-loading with potential confidentiality impact (CVSS v3.1: HIGH). The connected documents mention Huawei EMUI and HarmonyOS contexts referencing vulnerabilities, but do not provide concrete technical details (spe...

CVE-2023-52539

CVE-2023-52539 relates to a privilege check/permission verification vulnerability in the Settings module of Huawei HarmonyOS (and EMUI). The issue is described across multiple sources as a privilege checking flaw in the Settings component that can affect service confidentiality. The NVD entry not...

CVE-2023-52537

CVE-2023-52537 concerns Huawei HarmonyOS/HwIms: a package name validation bypass in the HwIms module enables an availability impact. Root cause described as a validation bypass for package names; affected are HarmonyOS/EMUI environments leveraging HwIms. The CVSS 3.1 score is 7.5 (Network, L/C/V,...

CVE-2023-52388

The CVE-2023-52388 entry concerns a privilege control vulnerability in the clock module of Huawei HarmonyOS (and EMUI). Multiple connected sources describe a clock-module privilege control flaw with CVSS 3.1 base score 7.5 (HIGH) and an Availability impact on exploitation. No concrete exploit det...

CVE-2024-23189

CVE-2024-23189 concerns Open-Xchange App Suite. A vulnerability arises from embedded content references in tasks that can temporarily execute script code in a user’s browser session. Exploitation would require user interaction or social engineering to import external content, and could enable mal...

CVE-2024-1752

The CVE-2024-1752 entry concerns Font Farsi WordPress plugin versions ≤ 1.6.6. The issue is stored XSS caused by insufficient sanitization/escaping of certain settings, enabling high-privilege users (e.g., admins) to inject scripts even when unfiltered_html is disallowed (including multisite setu...