127 matches found
Huawei HarmonyOS/EMUI Privilege Control Vulnerability (CNVD-2026-00138)
Huawei HarmonyOS is Huawei's self-developed distributed operating system, designed for cell phones, tablets, smart homes and other full-scene devices to achieve seamless cross-device collaboration. Huawei EMUI is Huawei's deeply customized mobile operating system based on Android. A privilege...
CVE-2025-58302
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58302
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58302
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
EUVD-2025-199860
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58302
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58302
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58302
Huawei HarmonyOS/EMUI exposes a privilege control vulnerability in the Settings module due to improper privilege control, leading to potential confidential data exposure (Impact: HIGH). Affected: HarmonyOS/EMUI settings subsystem; root cause described as privilege control flaw. Exploitation detai...
PT-2025-48305
Name of the Vulnerable Software and Affected Versions Settings module affected versions not specified Description A permission control issue exists within the Settings module that could impact the confidentiality of the service. Successful exploitation of this issue may lead to unauthorized acces...
CVE-2025-60451
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...
EUVD-2023-23922
Malicious code in bioql PyPI...
EUVD-2023-41042
Malicious code in bioql PyPI...
EUVD-2022-47964
Malicious code in bioql PyPI...
EUVD-2025-32294
Malicious code in bioql PyPI...
EUVD-2023-30843
Malicious code in bioql PyPI...
EUVD-2022-47939
Malicious code in bioql PyPI...
CVE-2025-60451
MetInfo CMS 8.0 contains a stored XSS due to insufficient validation/sanitization of SVG uploads in the website settings module, specifically in app/system/include/module/uploadify.class.php. The issue allows uploaded SVGs with JavaScript to execute when viewed. CVSS 3.1 base score 6.1 (Network a...
CVE-2025-60451
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...
CVE-2025-60451
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...