Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,068 results · page 8 of 22
Jan 7, 2025UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device.CVE-2024-56434 · Other software · Huawei · reported by psirt@huawei.comMedium 4.4
UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2024Some Huawei home music system products have a path traversal vulnerability.CVE-2023-7263 · Other software · Huawei · reported by psirt@huawei.comHigh 7.3
Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion or file permission change.(Vulnerability ID:HWPSIRT-2023-53450) This vulnerability has been assigned a (CVE)ID:CVE-2023-7263
- Product
- HarmonyOS AILife Solution 8.0
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2024Huawei HiLink AI Life product has an identity authentication bypass vulnerability.CVE-2022-48470 · Other software · Huawei · reported by psirt@huawei.comMedium 4
Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.(Vulnerability ID:HWPSIRT-2022-42291) This vulnerability has been assigned a (CVE)ID:CVE-2022-48470
- Product
- HarmonyOS AILife Solution 6.0
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2024Some Huawei wearables have a permission management vulnerability.CVE-2021-37000 · Other software · Huawei · reported by psirt@huawei.comHigh 7.7
Some Huawei wearables have a permission management vulnerability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2024Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data.CVE-2021-22484 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory (OOM).
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2024Huawei Home Music System has a path traversal vulnerability.CVE-2023-7300 · Other software · Huawei · reported by psirt@huawei.comHigh 8
Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the music host file to be deleted or the file permission to be changed.(Vulnerability ID:HWPSIRT-2023-60613)
- Product
- HarmonyOS AILife Solution 8.0
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-54122 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-54119 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-54117 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.CVE-2024-54116 · Other software · Huawei · reported by psirt@huawei.comMedium 4.3
Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-54115 · Other software · Huawei · reported by psirt@huawei.comMedium 4.3
Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-54114 · Other software · Huawei · reported by psirt@huawei.comMedium 4.4
Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect power consumption.CVE-2024-54113 · Other software · Huawei · reported by psirt@huawei.comMedium 6.5
Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect power consumption.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-54112 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-54111 · Other software · Huawei · reported by psirt@huawei.comMedium 5.7
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-54110 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-54109 · Other software · Huawei · reported by psirt@huawei.comMedium 6.5
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-54108 · Other software · Huawei · reported by psirt@huawei.comMedium 6.5
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-54107 · Other software · Huawei · reported by psirt@huawei.comHigh 7.1
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-54106 · Other software · Huawei · reported by psirt@huawei.comHigh 7.1
Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-54105 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-54104 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-54103 · Other software · Huawei · reported by psirt@huawei.comMedium 6.1
Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-54102 · Other software · Huawei · reported by psirt@huawei.comMedium 6.1
Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-54101 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Vulnerability of improper access control in the secure input module Impact: Successful exploitation of this vulnerability may cause features to perform abnormalCVE-2024-54100 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Vulnerability of improper access control in the secure input module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024File replacement vulnerability on some devices Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.CVE-2024-54099 · Other software · Huawei · reported by psirt@huawei.comMedium 6.7
File replacement vulnerability on some devices Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity.CVE-2024-54098 · Other software · Huawei · reported by psirt@huawei.comHigh 8.5
Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and integrity.CVE-2024-54097 · Other software · Huawei · reported by psirt@huawei.comHigh 7.3
Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and integrity.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Vulnerability of improper access control in the MTP module Impact: Successful exploitation of this vulnerability may affect integrity and accuracy.CVE-2024-54096 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Vulnerability of improper access control in the MTP module Impact: Successful exploitation of this vulnerability may affect integrity and accuracy.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024LaunchAnywhere vulnerability in the account module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-51530 · Other software · Huawei · reported by psirt@huawei.comMedium 6.6
LaunchAnywhere vulnerability in the account module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Data verification vulnerability in the battery module Impact: Successful exploitation of this vulnerability may affect function stability.CVE-2024-51529 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
Data verification vulnerability in the battery module Impact: Successful exploitation of this vulnerability may affect function stability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-51528 · Other software · Huawei · reported by psirt@huawei.comMedium 4
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-51527 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Permission control vulnerability in the hidebug module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-51526 · Other software · Huawei · reported by psirt@huawei.comHigh 8.2
Permission control vulnerability in the hidebug module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Permission control vulnerability in the clipboard module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-51525 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Permission control vulnerability in the clipboard module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-51524 · Other software · Huawei · reported by psirt@huawei.comMedium 4
Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-51523 · Other software · Huawei · reported by psirt@huawei.comHigh 7.1
Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availabCVE-2024-51522 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-51521 · Other software · Huawei · reported by psirt@huawei.comMedium 5.7
Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-51520 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-51519 · Other software · Huawei · reported by psirt@huawei.comMedium 5
Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-51518 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-51517 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Permission control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to function abnormally.CVE-2024-51516 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Permission control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to function abnormally.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability.CVE-2024-51515 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-51514 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption.CVE-2024-51513 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-51512 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 5, 2024Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-51511 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.