Search

Search Results (367904 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-56455 1 Huawei 1 Harmonyos 2025-01-13 5.5 Medium
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-56454 1 Huawei 1 Harmonyos 2025-01-13 5.5 Medium
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-56453 1 Huawei 1 Harmonyos 2025-01-13 6.8 Medium
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-56452 1 Huawei 1 Harmonyos 2025-01-13 5.5 Medium
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-56451 1 Huawei 1 Harmonyos 2025-01-13 7.3 High
Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-56450 1 Huawei 2 Emui, Harmonyos 2025-01-13 6.3 Medium
Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-56448 1 Huawei 2 Emui, Harmonyos 2025-01-13 6.7 Medium
Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-56449 1 Huawei 2 Emui, Harmonyos 2025-01-13 6.6 Medium
Privilege escalation vulnerability in the Account module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-56447 1 Huawei 2 Emui, Harmonyos 2025-01-13 7.8 High
Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-54121 1 Huawei 1 Harmonyos 2025-01-13 6.2 Medium
Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2024-56446 1 Huawei 1 Harmonyos 2025-01-13 4 Medium
Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-56445 1 Huawei 1 Harmonyos 2025-01-13 4.3 Medium
Instruction authentication bypass vulnerability in the Findnetwork module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2024-56444 1 Huawei 1 Harmonyos 2025-01-13 7.5 High
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-56443 1 Huawei 1 Harmonyos 2025-01-13 6.2 Medium
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-56442 1 Huawei 2 Emui, Harmonyos 2025-01-13 5.5 Medium
Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2024-56441 1 Huawei 2 Emui, Harmonyos 2025-01-13 4.1 Medium
Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-56440 1 Huawei 2 Emui, Harmonyos 2025-01-13 6.2 Medium
Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2024-7658 1 Projectsend 1 Projectsend 2025-01-13 5.3 Medium
A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function get_preview of the file process.php. The manipulation leads to improper control of resource identifiers. The attack may be initiated remotely. Upgrading to version r1720 is able to address this issue. The patch is named eb5a04774927e5855b9d0e5870a2aae5a3dc5a08. It is recommended to upgrade the affected component.
CVE-2023-29731 1 Loka 1 Solive 2025-01-13 7.5 High
SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an attacker injects too much data, the application will trigger an OOM error and crash at startup, resulting in a persistent denial of service.
CVE-2023-29726 1 Applika 1 Call Blocker 2025-01-13 7.5 High
The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application starts, it loads the data from the database into memory. Once the attacker injects too much data, the application triggers an OOM error and crashes, resulting in a persistent denial of service.