Lucene search
+L

1504 matches found

Positive Technologies
Positive Technologies
added 2022/10/14 12:0 a.m.11 views

PT-2022-26446 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.2 Description: The issue is related to an authentication bypass vulnerability in the callback handler function of Softbus server in the communication subsystem. Attackers can exploit this by sending Bluetooth...

8.8CVSS9.1AI score0.00297EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/10/14 12:0 a.m.7 views

PT-2022-26455 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions 3.1.2 and prior Description: The issue is related to a missing permission validation vulnerability in the param service of the startup subsystem. This could allow a malicious application installed on the device to elevate...

8.4CVSS7.4AI score0.0018EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/10/14 12:0 a.m.7 views

OpenHarmony 缓冲区错误漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony v3.1.2 and earlier and 3.0.6 and earlier, which stems from an out-of-bounds read or write of its /dev/mmzuserdev device driver memory...

5.1CVSS5.2AI score0.00316EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/10/14 12:0 a.m.9 views

OpenHarmony 授权问题漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony v3.1.2 and earlier versions, which stems from a callback function of Softbusserver in its communication subsystem that allows an attacker ...

8.8CVSS8.2AI score0.00297EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/10/14 12:0 a.m.25 views

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony v3.1.2 and earlier and 3.0.6 and earlier, which stems from a kernel memory pool overwriting issue in its /dev/mmzuserdev device driver...

7.8CVSS7.8AI score0.00193EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/10/14 12:0 a.m.6 views

OpenHarmony 安全漏洞

OpenHarmony is an open source project of the OpenAtom Foundation in China for a kind of Hongmeng operating system. A security vulnerability exists in OpenHarmony v3.1.2 and earlier versions, which stems from a lack of proper privilege validation in the parameter service of its boot subsystem that...

8.4CVSS7.4AI score0.0018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/10/14 12:0 a.m.12 views

PT-2022-26447 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions 3.1.2 and prior OpenHarmony versions 3.0.6 and prior Description: The issue is related to a Kernel memory pool override vulnerability in the /dev/mmz userdev device driver. The impact depends on the privileges of the...

7.8CVSS7.3AI score0.00193EPSS
SaveExploits0References3
OSV
OSV
added 2022/09/09 3:15 p.m.4 views

CVE-2022-38701

OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information...

3.3CVSS5.8AI score0.00187EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/09 3:15 p.m.20 views

CVE-2022-38701

OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information...

6.2CVSS0.00187EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/09 3:15 p.m.5 views

CVE-2022-38081

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system...

5.5CVSS5.8AI score0.00183EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/09 3:15 p.m.14 views

CVE-2022-38081

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system...

6.2CVSS0.00183EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/09 3:15 p.m.11 views

CVE-2022-38700

OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service...

8.8CVSS0.00352EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/09 3:15 p.m.6 views

CVE-2022-38700

OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service...

8.8CVSS5.8AI score0.00352EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/09 3:15 p.m.2 views

CVE-2022-38064

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information...

5.5CVSS5.8AI score0.00176EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/09 3:15 p.m.12 views

CVE-2022-38064

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information...

6.2CVSS0.00176EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/09 3:15 p.m.16 views

CVE-2022-36423

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices...

7.4CVSS0.00314EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/09 3:15 p.m.7 views

CVE-2022-36423

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices...

7.4CVSS5.8AI score0.00314EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/09 3:15 p.m.13 views

Heap overflow

OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information...

1.7CVSS4.5AI score0.00187EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/09/09 3:15 p.m.21 views

Stack overflow

OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices...

3.3CVSS7.5AI score0.00314EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/09/09 3:15 p.m.17 views

Design/Logic Flaw

OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information...

1.7CVSS5.6AI score0.00176EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder