Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
13 results
May 27, 2021There is a denial of service vulnerability in the versions 10.1.0.126(C00E125R5P3) of HUAWEI Mate 30 and 10.1.0.152(C00E136R7P2) of HUAWEI Mate 30 (5G) .CVE-2021-22364 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
There is a denial of service vulnerability in the versions 10.1.0.126(C00E125R5P3) of HUAWEI Mate 30 and 10.1.0.152(C00E136R7P2) of HUAWEI Mate 30 (5G) . A module does not verify certain parameters sufficiently and it leads to some exceptions. Successful exploit could cause a denial of service condition.
- Product
- Mate 30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 5, 2021There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3).CVE-2021-22305 · Other software · Huawei · reported by psirt@huawei.comLow 3.3
There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service.
- Product
- Mate 30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 5, 2021There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2).CVE-2021-22306 · Other software · Huawei · reported by psirt@huawei.comMedium 4.6
There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause out-of-bound, compromising normal service.
- Product
- Mate 30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 5, 2021There is a weak algorithm vulnerability in Mate 3010.0.0.203(C00E201R7P2).CVE-2021-22307 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
There is a weak algorithm vulnerability in Mate 3010.0.0.203(C00E201R7P2). The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module.
- Product
- Mate 30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 5, 2021Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability.CVE-2021-22301 · Other software · Huawei · reported by psirt@huawei.comMedium 6.7
Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. After obtaining the root permission, an attacker can exploit the vulnerability to cause buffer overflow.
- Product
- Mate 30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 29, 2020There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2).CVE-2020-9125 · Other software · Huawei · reported by psirt@huawei.comMedium 6.7
There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2). An attacker with specific permission can exploit this vulnerability by sending crafted packet with specific parameter to the target device. Due to insufficient validation of the parameter, successful exploit can cause the device to behave abnormally.
- Product
- Mate 30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 13, 2020HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation.CVE-2020-9129 · Other software · Huawei · reported by psirt@huawei.comMedium 6.7
HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to improper restrictions, local attackers with high privileges can exploit the vulnerability to cause system heap overflow.
- Product
- Mate 30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 19, 2020HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11) have a use after free vulnerability.CVE-2020-9263 · Other software · Huawei · reported by psirt@huawei.comHigh 7.8
HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11) have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with common privilege, successful exploit could cause code execution.
- Product
- Mate 30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 10, 2020HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a denial of service vulnerability.CVE-2020-9243 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a denial of service vulnerability. The system does not properly limit the depth of recursion, an attacker should trick the user installing and execute a malicious application. Successful exploit could cause a denial of service condition.
- Product
- Mate 30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 6, 2020HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a use after free vulnerability.CVE-2020-9262 · Other software · Huawei · reported by psirt@huawei.comHigh 7.8
HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful exploit could cause code execution.
- Product
- Mate 30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 6, 2020HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a type confusion vulnerability.CVE-2020-9261 · Other software · Huawei · reported by psirt@huawei.comHigh 7.8
HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a type confusion vulnerability. The system does not properly check and transform the type of certain variable, the attacker tricks the user into installing then running a crafted application, successful exploit could cause code execution.
- Product
- Mate 30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 6, 2020HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a race condition vulnerability.CVE-2020-1839 · Other software · Huawei · reported by psirt@huawei.comMedium 6.3
HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted application with high privilege, successful exploit could cause code execution.
- Product
- Mate 30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 18, 2020HUAWEI Mate 30 with versions earlier than 10.1.0.126(C00E125R5P3) have an information disclosure vulnerability.CVE-2020-1835 · Other software · Huawei · reported by psirt@huawei.comMedium 6.5
HUAWEI Mate 30 with versions earlier than 10.1.0.126(C00E125R5P3) have an information disclosure vulnerability. A logic judgment error occurs when the system handling Bluetooth connections, an attacker could craft as an authenticated Bluetooth peer to launch the attack. Successful exploit could cause information disclosure.
- Product
- Mate 30 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.