CVE-2019-5309

Honor play smartphones with versions earlier than 9.1.0.333C00E333R1P1T8 have an information disclosure vulnerability in certain Huawei . An attacker could view certain information after a series of operation without unlock the screen lock. Successful exploit could cause an information disclosure...

CVE-2019-5309: Improper Restriction of Excessive Authentication Attempts

Honor play smartphones with versions earlier than 9.1.0.333C00E333R1P1T8 have an information disclosure vulnerability in certain Huawei . An attacker could view certain information after a series of operation without unlock the screen lock. Successful exploit could cause an information disclosure...

PT-2019-17572

Name of the Vulnerable Software and Affected Versions Honor Play smartphones versions earlier than 9.1.0.333C00E333R1P1T8 Description The issue allows an attacker to view certain information after a series of operations without unlocking the screen lock, potentially causing an information...

Huawei Honor Play Information Disclosure Vulnerability

Huawei Honor Play is a smartphone product from Chinese company Huawei Huawei. An information disclosure vulnerability exists in previous versions of Huawei Honor Play 9.1.0.333 C00E333R1P1T8. The vulnerability can be exploited by an attacker to view some information on the phone without unlocking...

Google Will Award $1M-Plus to People Who Can Hack Titan M Security Chip

Google is willing to award up to $1.5 million to hackers who can successfully hack its Titan M security chip on the company’s Pixel devices as part of an expansion of its Android bug-bounty program unveiled this week. The company revealed increased payouts to its Android Security Rewards in a blo...

Popular Apps on Google Play Store Remain Unpatched

Most people think if they keep their mobile apps updated to the latest version, they also are patching for critical vulnerabilities. Not so, said researchers from Check Point Software, which discovered that outdated code—including known vulnerabilities—are still present in hundreds of popular app...

Microsoft Windows Multiple Vulnerabilities (KB4525237)

This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4525236)

This host is missing a critical security update according to Microsoft KB4525236 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4525232)

This host is missing a critical security update according to Microsoft KB4525232 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4523205)

This host is missing a critical security update according to Microsoft KB4523205 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

Authentication flaw

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-5213

CVE-2019-5213 affects Huawei Honor Play Cornell-AL00A devices running versions earlier than 9.1.0.321 (C00E320R1P1T8). The issue stems from a logic judgment error that enables an attacker to modify alarm clock settings without unlocking the screen. Huawei PSIRT notes the vulnerability and has rel...

CVE-2019-1405

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play UPnP service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play UPnP service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'...

PT-2019-17506

Name of the Vulnerable Software and Affected Versions Honor Play smartphones versions earlier than 9.1.0.321C00E320R1P1T8 Description The issue is related to insufficient authentication, which is caused by a logic judge error under certain scenarios. This could allow an attacker to modify alarm...

CVE-2019-1405: Improper Privilege Management

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play UPnP service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'...

PT-2019-3921

Name of the Vulnerable Software and Affected Versions Microsoft Windows Universal Plug and Play UPnP Service affected versions not specified Description An elevation of privilege issue exists due to the improper allowance of COM object creation by the Windows Universal Plug and Play UPnP service...