Updated 5 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list

36added in the last 30 days

544new WordPress flaws this week

391,181entries in the database

1,068 results · page 10 of 22

May 14, 2024Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32991 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
May 14, 2024Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32990 · Other software · Huawei · reported by psirt@huawei.comMedium 6.1
Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
May 14, 2024Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32989 · Other software · Huawei · reported by psirt@huawei.comLow 3.3
Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
May 14, 2024The WindowManager module has a vulnerability in permission control.CVE-2023-52721 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
May 14, 2024Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-52720 · Other software · Huawei · reported by psirt@huawei.comMedium 4.1
Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
May 14, 2024Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-52719 · Other software · Huawei · reported by psirt@huawei.comHigh 7.1
Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
May 14, 2024Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-52384 · Other software · Huawei · reported by psirt@huawei.comMedium 4.7
Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
May 14, 2024Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-52383 · Other software · Huawei · reported by psirt@huawei.comMedium 4.7
Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Input verification vulnerability in the call module.CVE-2024-27897 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Input verification vulnerability in the log module.CVE-2024-27896 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect integrity.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com https
Apr 8, 2024Vulnerability of permission control in the window module.CVE-2024-27895 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Out-of-bounds write vulnerability in the RSMC module.CVE-2023-52386 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Out-of-bounds write vulnerability in the RSMC module.CVE-2023-52385 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com https
Apr 8, 2024Vulnerability of input parameters being not strictly verified in the RSMC module.CVE-2023-52364 · Other software · Huawei · reported by psirt@huawei.comMedium 6.3
Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may cause out-of-bounds write.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Permission control vulnerability in the Bluetooth module.CVE-2023-52554 · Other software · Huawei · reported by psirt@huawei.comMedium 6.5
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com https
Apr 8, 2024Race condition vulnerability in the Wi-Fi module.CVE-2023-52553 · Other software · Huawei · reported by psirt@huawei.comHigh 7.4
Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Input verification vulnerability in the power module.CVE-2023-52552 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Vulnerability of data verification errors in the kernel module.CVE-2023-52551 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Vulnerability of data verification errors in the kernel module.CVE-2023-52550 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com https
Apr 8, 2024Vulnerability of data verification errors in the kernel module.CVE-2023-52549 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Vulnerability of package name verification being bypassed in the Calendar app.CVE-2023-52546 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record https https
Apr 8, 2024Vulnerability of undefined permissions in the Calendar app.CVE-2023-52545 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Vulnerability of file path verification being bypassed in the email module.CVE-2023-52544 · Other software · Huawei · reported by psirt@huawei.comMedium 4.3
Vulnerability of file path verification being bypassed in the email module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Permission verification vulnerability in the system module.CVE-2023-52543 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Permission verification vulnerability in the system module.CVE-2023-52542 · Other software · Huawei · reported by psirt@huawei.comMedium 6.5
Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Authentication vulnerability in the API for app pre-loading.CVE-2023-52541 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Vulnerability of improper authentication in the Iaware module.CVE-2023-52540 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Permission verification vulnerability in the Settings module.CVE-2023-52539 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Vulnerability of package name verification being bypassed in the HwIms module.CVE-2023-52538 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Vulnerability of package name verification being bypassed in the HwIms module.CVE-2023-52537 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Permission control vulnerability in the clock module.CVE-2023-52388 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 8, 2024Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module.CVE-2023-52359 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com https
Apr 7, 2024Vulnerability of insufficient permission verification in the app management module.CVE-2024-30418 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of insufficient permission verification in the app management module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 7, 2024Path traversal vulnerability in the Bluetooth-based sharing module.CVE-2024-30417 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 7, 2024Use After Free (UAF) vulnerability in the underlying driver module.CVE-2024-30416 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Use After Free (UAF) vulnerability in the underlying driver module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com https
Apr 7, 2024Permission verification vulnerability in the lock screen module.CVE-2023-52717 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 7, 2024Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module.CVE-2023-52716 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com https
Apr 7, 2024The SystemUI module has a vulnerability in permission management.CVE-2023-52715 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com https
Apr 7, 2024Vulnerability of defects introduced in the design process in the hwnff module.CVE-2023-52714 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com https
Apr 7, 2024Vulnerability of improper permission control in the window management module.CVE-2023-52713 · Other software · Huawei · reported by psirt@huawei.comHigh 7.7
Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 7, 2024Vulnerability of improper permission control in the window management module.CVE-2024-30415 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 7, 2024Command injection vulnerability in the AccountManager module.CVE-2024-30414 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Command injection vulnerability in the AccountManager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Apr 7, 2024Vulnerability of improper permission control in the window management module.CVE-2024-30413 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 18, 2024Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availabilityCVE-2023-52381 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 18, 2024Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-52380 · Other software · Huawei · reported by psirt@huawei.comMedium 4.3
Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 18, 2024Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-52379 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 18, 2024Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perform abnormaCVE-2023-52378 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perform abnormally.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 18, 2024Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentialCVE-2022-48621 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 18, 2024Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bounds access.CVE-2023-52377 · Other software · Huawei · reported by psirt@huawei.comHigh 7.4
Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bounds access.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 18, 2024Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-52376 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.