240 matches found
CVE-2022-34159
Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause device service exceptions. Vulnerability ID: HWPSIRT-2022-80078 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-34159...
CVE-2022-34159
Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause device service exceptions. Vulnerability ID: HWPSIRT-2022-80078 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-34159...
The vulnerability of the QUIC protocol implementation in the quic-go library, written in the Go programming language, arises from insufficient verification of data authenticity. This allows attackers to influence the accessibility of protected information.
The vulnerability of the QUIC protocol implementation in the Go programming language library quic-go is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the accessibility of protected...
Directory Traversal
github.com/0xJacky/Nginx-UI is vulnerable to Directory Traversal. The vulnerability is due to insufficient verification of values from the JSON field, allowing the construction of values in the form of ../../, which can lead to arbitrary file writing...
CVE-2024-45449
Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-45441
Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability...
CVE-2024-42031
CVE-2024-42031 is a reported access permission verification vulnerability in the Huawei HarmonyOS/EMUI Settings module that could affect service confidentiality. Public descriptions consistently state an issue in the Settings module’s access control, with the CVSSv3.1 base score of 7.5 (HIGH) and...
Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2024-629)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-629 advisory. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing...
Rocky Linux 9 : git-lfs (RLSA-2024:2724)
The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2724 advisory. - An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining...
SUSE-SU-2024:1444-1 Security update for php7
This update for php7 fixes the following issues: - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies as secure bsc1222857 - CVE-2024-3096: Fixed bypass on null byte leading passwords checked via passwordverify bsc1222858...
Infinite loop
Overview BouncyCastle is a C implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Infinite loop in ED25519 verification in the ScalarUtil class. An attacker can send a malicious signature and public key to trigger denial of service. Remediation There is ...
CVE-2024-27896
Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect integrity...
CVE-2024-27897
Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-27897
CVE-2024-27897 describes an input verification vulnerability in the call module of Huawei HarmonyOS Wearables. The issue is that improper input handling in the call module could potentially expose service confidentiality. Affected component: the call module within Huawei HarmonyOS Wearables; sour...
CVE-2024-27896
CVE-2024-27896 is described across multiple feeds as an input verification vulnerability in Huawei HarmonyOS/EMUI log-module. The NVD entry lists a CVSS 3.1 base score of 7.5 (HIGH) with network attack vector and no user interaction, but integrity impact is HIGH. Connected records corroborate the...
CVE-2023-52552
Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability...
CVE-2023-52552
Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability...
PT-2024-22118 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: Call module affected versions not specified Description: The issue is related to an input verification vulnerability in the call module. Successful exploitation of this vulnerability may affect service confidentiality. Recommendations: At the...