Archive
January 2022
Vulnerabilities first published in this month (UTC), newest first.
2,026 results · Feed
-
High 7.5
The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may …
-
High 7.5
The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful explo…
-
High 7.5
The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may ca…
-
High 7.5
The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerab…
-
High 7.5
Huawei idap module has a Out-of-bounds Read vulnerability.Successful exploitation of this vulnerability may cause Denia…
-
High 7.5
The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may …
-
High 7.5
The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may ca…
-
Unscored —
The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this…
-
Unscored —
Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this …
-
Unscored —
There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.
-
Unscored —
There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.
-
Unscored —
There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of t…
-
Unscored —
There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect ser…
-
Unscored —
There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory ex…
-
Unscored —
Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerabili…
-
Unscored —
Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploit…
-
Unscored —
Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exp…
-
Unscored —
HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system int…
-
Unscored —
Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy…
-
Unscored —
Hilinksvc has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause denial of …
-
Unscored —
MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of …
-
Unscored —
Password vault has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this …
-
Unscored —
HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create an…
-
Unscored —
Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand…
-
Unscored —
Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Highe…
-
Unscored —
PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this…
-
Unscored —
Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation …
-
Unscored —
HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file.
-
Unscored —
Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation …
-
Unscored —
PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may ca…
-
Unscored —
Hilinksvc service exists a Data Processing Errors vulnerability .Successful exploitation of this vulnerability may caus…
-
Unscored —
There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel cra…
-
Unscored —
There is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may elevate the MEID (IMEI…
-
Unscored —
ManageEngine ADSelfService Plus below build 6116 stores the password policy file for each domain under the html/ web ro…
-
Unscored —
ManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in the UMCP operation of t…
-
Unscored —
A NULL pointer dereference in the main() function dhry_1.c of dhrystone 2.1 causes a denial of service (DoS).
-
High 8.6
Improper Authorization in openwhyd/openwhyd
openwhyd is vulnerable to Improper Authorization
-
Unscored —
Invalid input sanitizing leads to reflected Cross Site Scripting (XSS) in ASUS RT-AC52U_B1 3.0.0.4.380.10931 can lead t…
-
Unscored —
TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can uplo…
-
Unscored —
Booking Calendar < 8.9.2 - Reflected Cross-Site Scripting
The Booking Calendar WordPress plugin before 8.9.2 does not sanitise and escape the booking_type parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting