CVE-2024-3424

SourceCodester Online Courseware 1.0 contains a SQL injection in admin/listscore.php via the title parameter. This enables remote exploitation and is supported by multiple sources (NVD, Red Hat, CVE lists) indicating a critical vulnerability with high impact on confidentiality, integrity, and ava...

CVE-2024-3423

CVE-2024-3423 affects SourceCodester Online Courseware 1.0. The issue is an SQL injection in the admin/activateteach.php file, caused by tainted manipulation of the selector argument. Exploitation is possible remotely and publicized. Multiple connected records corroborate the exact target file an...

CVE-2024-3422

CVE-2024-3422 affects SourceCodester Online Courseware 1.0. The vulnerability is an SQL injection in the file admin/activatestud.php caused by unsafely manipulating the selector argument. It can be exploited remotely and has been publicly disclosed (VDB-259594). Several connected sources concur o...

CVE-2024-3421

CVE-2024-3421 concerns SourceCodester Online Courseware 1.0, affecting the admin/deactivatestud.php file where manipulation of the selector parameter enables SQL injection. The vulnerability can be exploited remotely and has been publicly disclosed (VDB-259593). Affected software is 1.0; no offic...

CVE-2024-3420

CVE-2024-3420 affects SourceCodester Online Courseware 1.0, specifically the file admin/saveedit.php where the id parameter is injectable, leading to SQL injection. The vulnerability can be exploited remotely and exploits have been publicly disclosed. NVD lists a CVSS v3.1 base score of 9.8 (CRIT...

CVE-2024-3419

CVE-2024-3419 affects SourceCodester Online Courseware 1.0; SQL injection via the id parameter in admin/edit.php is the root cause. The vulnerability is exploitable remotely and exploits have been publicly disclosed. No patch/version fix details are provided in the connected documents. Mitigation...

CVE-2024-3418

CVE-2024-3418 affects SourceCodester Online Courseware 1.0, due to an SQL injection in admin/deactivateteach.php where the selector argument is manipulated. The vulnerability allows remote exploitation and has been publicly disclosed. Several connected sources confirm the issue and indicate the a...

CVE-2023-52717

Huawei HarmonyOS and EMUI contain a lock screen module privilege checking vulnerability (CVE-2023-52717). Connected sources describe a privilege checking type flaw in the lock screen component that can impact usability. The exact affected versions, root cause details, exploitation status, and fix...

CVE-2023-52715

CVE-2023-52715 affects Huawei HarmonyOS SystemUI module with a privilege/permission management vulnerability. The available documents describe impact to availability and a high-severity CVSS v3.1 rating (7.5, NETWORK attack vector, LOW complexity, NO privileges required, NO user interaction). The...

CVE-2021-4438

CVE-2021-4438 affects kyivstarteam/react-native-sms-user-consent up to 1.1.4 on Android. The issue lies in SmsUserConsentModule.kt, registerReceiver, causing improper export of Android components. Local attack is required. Upgrading to version 1.1.5 fixes the vulnerability (patch: 5423dcb0cd3e4d5...

CVE-2023-52382

CVE-2023-52382 entry is rejected/not used.

CVE-2023-52714

CVE-2023-52714 affects Huawei HarmonyOS (and Huawei EMUI) via the hwnff module. The root cause is defects introduced in the design process of the hwnff module, leading to potential information disclosure that may compromise service confidentiality. Documentation consistently states impact as conf...

CVE-2023-52713

CVE-2023-52713 corresponds to Huawei HarmonyOS/EMUI — improper privilege control in the window management module. Root cause: privilege control flaw; impact on confidentiality and availability. CVSS (from the initial document) shows local attack, low complexity, no user interaction needed, with h...

CVE-2024-30418

CVE-2024-30418 affects Huawei HarmonyOS and EMUI via the app management module. The root cause is insufficient permission verification, enabling an attacker to exploit the component to cause a denial of service, impacting availability. Connections across sources corroborate the issue and its impa...

CVE-2024-30417

Huawei HarmonyOS and EMUI are affected by a path traversal vulnerability in the Bluetooth-based sharing module. The issue can allow an attacker to view arbitrary files on the system and has been described with high impact to confidentiality (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Public ...

CVE-2024-30415

CVE-2024-30415 relates to Huawei HarmonyOS/EMUI with a denial-of-service vulnerability due to improper privilege control in the window management module. Public sources (CNVD/CNNVD, RH Red Hat, NVD list) describe impact as availability disruption but do not provide precise affected versions, root...

CVE-2024-30414

CVE-2024-30414 describes a command-injection vulnerability in Huawei HarmonyOS and EMUI’s AccountManager module. Affected component: AccountManager; impact is potential disclosure of confidentiality if exploited. From the sources, the vulnerability is rated CVSSv3.1 as 7.5 (High) with network acc...

CVE-2024-30413

Technical details about CVE-2024-30413 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2024-3417

CVE-2024-3417 concerns SourceCodester Online Courseware 1.0. The vulnerability is in the admin/saveeditt.php file where manipulating the contact parameter leads to SQL injection. Attack could be remote; exploit has been disclosed publicly. Impact is described as high for confidentiality, integrit...

CVE-2021-47208

The CVE targets the Mojolicious Perl module, where the format-detection logic in the module is buggy. Versions before 9.11 are vulnerable to denial of service. The vulnerability is caused by a flaw in how input formats are detected, enabling a potential remote DoS. A remediation is to upgrade to ...