Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,068 results · page 9 of 22
Nov 5, 2024Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-51510 · Other software · Huawei · reported by psirt@huawei.comHigh 7.6
Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024Access permission verification vulnerability in the App Multiplier module Impact: Successful exploitation of this vulnerability may affect service confidentialiCVE-2024-9136 · Other software · Huawei · reported by psirt@huawei.comMedium 6.7
Access permission verification vulnerability in the App Multiplier module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-47294 · Other software · Huawei · reported by psirt@huawei.comMedium 4.4
Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-47293 · Other software · Huawei · reported by psirt@huawei.comMedium 4.7
Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-47292 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-47291 · Other software · Huawei · reported by psirt@huawei.comMedium 5.6
Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024Input validation vulnerability in the USB service module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-47290 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
Input validation vulnerability in the USB service module Impact: Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2024Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-8298 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhttpsconsumer.huawei.com
Sep 3, 2024Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidentiaCVE-2024-45449 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2024Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this vulnerability may affect service confidCVE-2024-45448 · Other software · Huawei · reported by psirt@huawei.comMedium 4.1
Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Sep 3, 2024Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-45447 · Other software · Huawei · reported by psirt@huawei.comMedium 4.4
Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2024Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-45446 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2024Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-45445 · Other software · Huawei · reported by psirt@huawei.comMedium 4
Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2024Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-45444 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2024Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.CVE-2024-45443 · Other software · Huawei · reported by psirt@huawei.comMedium 6.1
Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2024Permission control vulnerability in the software update module.CVE-2024-45450 · Other software · Huawei · reported by psirt@huawei.comMedium 4
Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2024Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availabilCVE-2024-45442 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2024Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-45441 · Other software · huawei · reported by psirt@huawei.comMedium 6.2
Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2024Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-42039 · Other software · Huawei · reported by psirt@huawei.comMedium 4.3
Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2024Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, inCVE-2024-42038 · Other software · Huawei · reported by psirt@huawei.comHigh 8.8
Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2024Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-42037 · Other software · Huawei · reported by psirt@huawei.comCritical 9.3
Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2024Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-42036 · Other software · Huawei · reported by psirt@huawei.comLow 2.5
Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2024Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality.CVE-2024-42035 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2024LaunchAnywhere vulnerability in the account module.CVE-2024-42034 · Other software · Huawei · reported by psirt@huawei.comMedium 6.6
LaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2024Access control vulnerability in the security verification module mpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.CVE-2024-42033 · Other software · Huawei · reported by psirt@huawei.comMedium 6.9
Access control vulnerability in the security verification module mpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2024Access permission verification vulnerability in the Contacts module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-42032 · Other software · Huawei · reported by psirt@huawei.comMedium 4.4
Access permission verification vulnerability in the Contacts module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2024Access permission verification vulnerability in the Settings module.CVE-2024-42031 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Access permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2024Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may affect service confiCVE-2024-42030 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2024Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availabilityCVE-2023-7265 · Other software · Huawei · reported by psirt@huawei.comMedium 4
Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availability
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 25, 2024Plaintext vulnerability in the Gallery search module.CVE-2024-39674 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jul 25, 2024Vulnerability of serialisation/deserialisation mismatch in the iAware module.CVE-2024-39673 · Other software · Huawei · reported by psirt@huawei.comMedium 6.8
Vulnerability of serialisation/deserialisation mismatch in the iAware module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jul 25, 2024Memory request logic vulnerability in the memory module.CVE-2024-39672 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Memory request logic vulnerability in the memory module. Impact: Successful exploitation of this vulnerability will affect integrity and availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jul 25, 2024Access control vulnerability in the security verification module.CVE-2024-39671 · Other software · Huawei · reported by psirt@huawei.comCritical 9.3
Access control vulnerability in the security verification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jul 25, 2024Privilege escalation vulnerability in the account synchronisation module.CVE-2024-39670 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jul 25, 2024Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-7271 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 14, 2024Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-5465 · Other software · Huawei · reported by psirt@huawei.comMedium 5.9
Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 14, 2024Vulnerability of insufficient permission verification in the NearLink module Impact: Successful exploitation of this vulnerability may affect service confidentiCVE-2024-5464 · Other software · Huawei · reported by psirt@huawei.comMedium 4
Vulnerability of insufficient permission verification in the NearLink module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 14, 2024Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-36503 · Other software · Huawei · reported by psirt@huawei.comHigh 7.3
Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 14, 2024Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-36502 · Other software · Huawei · reported by psirt@huawei.comHigh 7.9
Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 14, 2024Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect integrity.CVE-2024-36501 · Other software · Huawei · reported by psirt@huawei.comMedium 5.6
Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect integrity.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 14, 2024Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-36500 · Other software · Huawei · reported by psirt@huawei.comHigh 7.8
Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 14, 2024Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-36499 · Other software · Huawei · reported by psirt@huawei.comMedium 6.8
Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
May 14, 2024Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-4046 · Other software · Huawei · reported by psirt@huawei.comMedium 6.4
Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32999 · Other software · Huawei · reported by psirt@huawei.comMedium 6.8
Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32998 · Other software · Huawei · reported by psirt@huawei.comMedium 5.9
NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32997 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32996 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32995 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32993 · Other software · Huawei · reported by psirt@huawei.comMedium 5.6
Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 14, 2024Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-32992 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.