Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,281 results · page 12 of 26
Jul 2, 2024in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.CVE-2024-37185 · Other software · OpenHarmony · reported by scy@openharmony.ioHigh 8.2
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 2, 2024in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.CVE-2024-37077 · Other software · OpenHarmony · reported by scy@openharmony.ioHigh 8.2
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 2, 2024in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through use after free.CVE-2024-37030 · Other software · OpenHarmony · reported by scy@openharmony.ioHigh 8.2
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through use after free.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 2, 2024in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.CVE-2024-36278 · Other software · OpenHarmony · reported by scy@openharmony.ioLow 3.3
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 2, 2024in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.CVE-2024-36260 · Other software · OpenHarmony · reported by scy@openharmony.ioHigh 8.2
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 2, 2024in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write.CVE-2024-36243 · Other software · OpenHarmony · reported by scy@openharmony.ioHigh 8.2
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 2, 2024in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.CVE-2024-31071 · Other software · OpenHarmony · reported by scy@openharmony.ioLow 3.3
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 14, 2024Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-5465 · Other software · Huawei · reported by psirt@huawei.comMedium 5.9
Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 14, 2024Vulnerability of insufficient permission verification in the NearLink module Impact: Successful exploitation of this vulnerability may affect service confidentiCVE-2024-5464 · Other software · Huawei · reported by psirt@huawei.comMedium 4
Vulnerability of insufficient permission verification in the NearLink module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 14, 2024Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-36503 · Other software · Huawei · reported by psirt@huawei.comHigh 7.3
Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 14, 2024Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-36502 · Other software · Huawei · reported by psirt@huawei.comHigh 7.9
Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 14, 2024Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect integrity.CVE-2024-36501 · Other software · Huawei · reported by psirt@huawei.comMedium 5.6
Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect integrity.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 14, 2024Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-36500 · Other software · Huawei · reported by psirt@huawei.comHigh 7.8
Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 14, 2024Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-36499 · Other software · Huawei · reported by psirt@huawei.comMedium 6.8
Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
May 28, 2024If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte ofCVE-2024-30212 · Other software · Microchip · reported by dc3f6da9-85b5-4a73-84a2-2ec90b40fca5High 7
If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte of the 0x80000000 memory area is returned to the user. If the block count is increased, the full RAM can be exposed. The same method works to write to this memory area. If RAM contains pointers, those can be - depending on the application - overwritten to return data from any other offset including Progam and Boot Flash.
- Product
- MPLAB® Harmony 3 Core Module
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 14, 2024Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-4046 · Other software · Huawei · reported by psirt@huawei.comMedium 6.4
Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32999 · Other software · Huawei · reported by psirt@huawei.comMedium 6.8
Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32998 · Other software · Huawei · reported by psirt@huawei.comMedium 5.9
NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32997 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32996 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32995 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32993 · Other software · Huawei · reported by psirt@huawei.comMedium 5.6
Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32992 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32991 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32990 · Other software · Huawei · reported by psirt@huawei.comMedium 6.1
Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
May 14, 2024Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32989 · Other software · Huawei · reported by psirt@huawei.comLow 3.3
Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
May 14, 2024The WindowManager module has a vulnerability in permission control.CVE-2023-52721 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-52720 · Other software · Huawei · reported by psirt@huawei.comMedium 4.1
Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-52719 · Other software · Huawei · reported by psirt@huawei.comHigh 7.1
Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-52384 · Other software · Huawei · reported by psirt@huawei.comMedium 4.7
Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-52383 · Other software · Huawei · reported by psirt@huawei.comMedium 4.7
Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 7, 2024in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.CVE-2024-3759 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 6.5
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 7, 2024in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.CVE-2024-3758 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 6.5
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 7, 2024in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow.CVE-2024-3757 · Other software · OpenHarmony · reported by scy@openharmony.ioLow 3.3
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 7, 2024in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference.CVE-2024-31078 · Other software · OpenHarmony · reported by scy@openharmony.ioLow 3.3
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 7, 2024in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.CVE-2024-27217 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 6.5
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 7, 2024in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cause DOS through NULL CVE-2024-23808 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 5.2
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cause DOS through NULL pointer dereference.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 1, 2024A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below.CVE-2024-24912 · Other software · checkpoint · reported by cve@checkpoint.comMedium 6.7
A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system.
- Product
- Harmony Endpoint Security Client for Windows
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.checkpoint.comsupport.checkpoint.com
Apr 8, 2024Input verification vulnerability in the call module.CVE-2024-27897 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Apr 8, 2024Input verification vulnerability in the log module.CVE-2024-27896 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect integrity.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comhttps
Apr 8, 2024Vulnerability of permission control in the window module.CVE-2024-27895 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Apr 8, 2024Out-of-bounds write vulnerability in the RSMC module.CVE-2023-52386 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Apr 8, 2024Out-of-bounds write vulnerability in the RSMC module.CVE-2023-52385 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comhttps
Apr 8, 2024Vulnerability of input parameters being not strictly verified in the RSMC module.CVE-2023-52364 · Other software · Huawei · reported by psirt@huawei.comMedium 6.3
Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may cause out-of-bounds write.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Apr 8, 2024Permission control vulnerability in the Bluetooth module.CVE-2023-52554 · Other software · Huawei · reported by psirt@huawei.comMedium 6.5
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comhttps
Apr 8, 2024Race condition vulnerability in the Wi-Fi module.CVE-2023-52553 · Other software · Huawei · reported by psirt@huawei.comHigh 7.4
Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Apr 8, 2024Input verification vulnerability in the power module.CVE-2023-52552 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Apr 8, 2024Vulnerability of data verification errors in the kernel module.CVE-2023-52551 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Apr 8, 2024Vulnerability of data verification errors in the kernel module.CVE-2023-52550 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comhttps
Apr 8, 2024Vulnerability of data verification errors in the kernel module.CVE-2023-52549 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.