Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,281 results · page 4 of 26
Jan 13, 2026Permission verification bypass vulnerability in the media library module.CVE-2025-68959 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jan 13, 2026Multi-thread race condition vulnerability in the card framework module.CVE-2025-68958 · Other software · Huawei · reported by psirt@huawei.comHigh 8
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jan 13, 2026Multi-thread race condition vulnerability in the card framework module.CVE-2025-68957 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jan 13, 2026Multi-thread race condition vulnerability in the card framework module.CVE-2025-68956 · Other software · Huawei · reported by psirt@huawei.comHigh 8
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jan 13, 2026Multi-thread race condition vulnerability in the card framework module.CVE-2025-68955 · Other software · Huawei · reported by psirt@huawei.comHigh 8
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Dec 8, 2025Denial of service (DoS) vulnerability in the office service.CVE-2025-66334 · Other software · Huawei · reported by psirt@huawei.comLow 3.3
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025Denial of service (DoS) vulnerability in the office service.CVE-2025-66333 · Other software · Huawei · reported by psirt@huawei.comLow 3.3
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025Denial of service (DoS) vulnerability in the office service.CVE-2025-66332 · Other software · Huawei · reported by psirt@huawei.comLow 3.3
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025Denial of service (DoS) vulnerability in the office service.CVE-2025-66331 · Other software · Huawei · reported by psirt@huawei.comLow 3.3
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025App lock verification bypass vulnerability in the file management app.CVE-2025-66330 · Other software · Huawei · reported by psirt@huawei.comMedium 4.9
App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025Permission control vulnerability in the window management module.CVE-2025-66329 · Other software · Huawei · reported by psirt@huawei.comMedium 4
Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Dec 8, 2025Multi-thread race condition vulnerability in the network management module.CVE-2025-66328 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025Race condition vulnerability in the network module.CVE-2025-66327 · Other software · Huawei · reported by psirt@huawei.comHigh 7.1
Race condition vulnerability in the network module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025Permission control vulnerability in the package management module.CVE-2025-66325 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025Permission control vulnerability in the media library module.CVE-2025-58279 · Other software · Huawei · reported by psirt@huawei.comMedium 4.4
Permission control vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025Race condition vulnerability in the audio module.CVE-2025-66326 · Other software · Huawei · reported by psirt@huawei.comMedium 6.7
Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025Input verification vulnerability in the compression and decompression module.CVE-2025-66324 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025Vulnerability of improper criterion security check in the card module.CVE-2025-66323 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025Multi-thread race condition vulnerability in the camera framework module.CVE-2025-66322 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025Multi-thread race condition vulnerability in the camera framework module.CVE-2025-66321 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2025Multi-thread race condition vulnerability in the camera framework module.CVE-2025-66320 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Permission control vulnerability in the file management module.CVE-2025-64312 · Other software · Huawei · reported by psirt@huawei.comMedium 4.9
Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025UAF vulnerability in the USB driver module.CVE-2025-58311 · Other software · Huawei · reported by psirt@huawei.comMedium 5.8
UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Vulnerability of improper criterion security check in the call module.CVE-2025-58308 · Other software · Huawei · reported by psirt@huawei.comHigh 7.3
Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Identity authentication bypass vulnerability in the Gallery app.CVE-2025-58305 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Permission control vulnerability in the file management module.CVE-2025-58304 · Other software · Huawei · reported by psirt@huawei.comMedium 4.9
Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Permission control vulnerability in the Settings module.CVE-2025-58302 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Configuration defect vulnerability in the file management module.CVE-2025-64315 · Other software · Huawei · reported by psirt@huawei.comMedium 4.4
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Permission control vulnerability in the memory management module.CVE-2025-64314 · Other software · Huawei · reported by psirt@huawei.comCritical 9.3
Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Denial of service (DoS) vulnerability in the office service.CVE-2025-64313 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Permission control vulnerability in the Notepad module.CVE-2025-64311 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025DoS vulnerability in the video-related system service module.CVE-2025-58316 · Other software · Huawei · reported by psirt@huawei.comHigh 7.3
DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Permission control vulnerability in the Wi-Fi module.CVE-2025-58315 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Vulnerability of accessing invalid memory in the component driver module.CVE-2025-58314 · Other software · Huawei · reported by psirt@huawei.comMedium 6.6
Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Permission control vulnerability in the App Lock module.CVE-2025-58312 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Permission control vulnerability in the distributed component.CVE-2025-58310 · Other software · Huawei · reported by psirt@huawei.comHigh 8
Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Permission control vulnerability in the startup recovery module.CVE-2025-58309 · Other software · Huawei · reported by psirt@huawei.comMedium 6.8
Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025UAF vulnerability in the screen recording framework module.CVE-2025-58307 · Other software · Huawei · reported by psirt@huawei.comMedium 6.4
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025UAF vulnerability in the screen recording framework module.CVE-2025-58303 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 27, 2025Permission control vulnerability in the print module.CVE-2025-58294 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 12, 2025A SQL injection vulnerability exists in the login functionality of WellSky Harmony version 4.1.0.2.83 within the 'xmHarmony.asp' endpoint.CVE-2025-56385 · Other software · Wellsky · reported by MITRECritical 9.8
A SQL injection vulnerability exists in the login functionality of WellSky Harmony version 4.1.0.2.83 within the 'xmHarmony.asp' endpoint. User-supplied input to the 'TXTUSERID' parameter is not properly sanitized before being incorporated into a SQL query. Successful authentication may lead to authentication bypass, data leakage, or full system compromise of backend database contents.
- Product
- Harmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2025Buffer overflow vulnerability in the device management module.CVE-2025-58301 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2025Buffer overflow vulnerability in the device management module.CVE-2025-58300 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2025Vulnerability of improper exception handling in the print module.CVE-2025-58293 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2025Vulnerability of improper exception handling in the print module.CVE-2025-58289 · Other software · Huawei · reported by psirt@huawei.comMedium 5.9
Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2025Use After Free (UAF) vulnerability in the storage management module.CVE-2025-58299 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2025Data processing error vulnerability in the package management module.CVE-2025-58298 · Other software · Huawei · reported by psirt@huawei.comHigh 7.3
Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2025Buffer overflow vulnerability in the sensor service.CVE-2025-58297 · Other software · Huawei · reported by psirt@huawei.comMedium 5.9
Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2025Buffer overflow vulnerability in the development framework module.CVE-2025-58295 · Other software · Huawei · reported by psirt@huawei.comMedium 5.9
Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2025Denial of service (DoS) vulnerability in the office service.CVE-2025-58292 · Other software · Huawei · reported by psirt@huawei.comLow 3.3
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.