CVE-2023-23424

Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution...

CVE-2023-23424

Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution...

Information disclosure

Some Honor products are affected by file writing vulnerability, successful exploitation could cause information disclosure...

Code injection

Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution...

CVE-2023-23426

Some Honor products are affected by file writing vulnerability, successful exploitation could cause information disclosure...

CVE-2023-23426

CVE-2023-23426 affects Honor products, including Honor FRI-AN00 per CNNVD; reports describe a file-writing vulnerability that could lead to information disclosure. The connected sources consistently identify the issue as a local-access file-write flaw, with confidentiality impact but no explicit ...

CVE-2023-23424

CVE-2023-23424 affects some Honor products via a file-writing vulnerability that can lead to code execution. The available sources consistently describe a security issue in Honor firmware/software components enabling remote-like exploitation with no user interaction, high impact to confidentialit...

CVE-2023-23424

Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution...

CVE-2023-23424

Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution...

PT-2023-18932 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue concerns a file writing vulnerability. Successful exploitation of this vulnerability could lead to code execution. Recommendations: At the moment, there is no information...

PT-2023-18933 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to a file writing vulnerability. Successful exploitation of this vulnerability could cause information disclosure. Recommendations: At the moment, there is no...

CVE-2023-50731 MindsDB has arbitrary file write in file.py

MindsDB is a SQL Server for artificial intelligence. Prior to version 23.11.4.1, the put method in mindsdb/mindsdb/api/http/namespaces/file.py does not validate the user-controlled name value, which is used in a temporary file name, which is afterwards opened for writing on lines 122-125, which...

CVE-2023-50731

CVE-2023-50731 – MindsDB : The vulnerability arises in mindsdb/mindsdb/api/http/namespaces/file.py, where the PUT path does not validate the user-controlled name used for a temporary file. This leads to path injection, allowing arbitrary file writes via f.write(chunk) and potential write outside ...

Huawei EulerOS: Security Advisory for procps-ng (EulerOS-SA-2023-3366)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-41151

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing...

CVE-2023-42678

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42676

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

PT-2023-28494 · Unknown · Imsservice

Name of the Vulnerable Software and Affected Versions: imsservice affected versions not specified Description: The issue is related to a missing permission check in imsservice, which could allow writing permission usage records of an app. This may lead to local information disclosure without...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the telecom service, with a possible method to write a privilege usage log of the application...

PT-2023-28540 · Dialer · Dialer

Name of the Vulnerable Software and Affected Versions: Dialer affected versions not specified Description: The issue is related to a missing permission check in the dialer, which could allow writing permission usage records of an app. This could lead to local information disclosure without...