Archive
9 February 2023
Vulnerabilities first published on this day (UTC), newest first.
54 results · Clear filters · Feed
-
High 7.5
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affec…
-
High 7.5
The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this …
-
High 7.5
The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability …
-
High 7.5
The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation o…
-
High 7.5
The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability …
-
High 7.5
The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to…
-
High 7.5
The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this …
-
High 7.5
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affec…
-
High 7.5
The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may a…
-
High 7.5
The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerabi…
-
High 7.5
The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data i…
-
High 7.5
The multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnera…
-
High 7.5
Denial of service via header parsing in Rack
A denial of service vulnerability in the Range header parsing component of Rack >= 1.5.0. A Carefully crafted input can cause the Range header parsing component in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vec…
-
High 7.5
Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. …