Total
67 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2024-58043 | 2025-03-04 | 7.3 High | ||
Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
CVE-2023-1541 | 1 Answer | 1 Answer | 2025-02-27 | 3.8 Low |
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. | ||||
CVE-2023-1542 | 1 Answer | 1 Answer | 2025-02-26 | 5.4 Medium |
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. | ||||
CVE-2024-45424 | 2025-02-25 | 5.3 Medium | ||
Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access. | ||||
CVE-2023-1887 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-02-10 | 4.3 Medium |
Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | ||||
CVE-2024-56449 | 1 Huawei | 2 Emui, Harmonyos | 2025-01-13 | 6.6 Medium |
Privilege escalation vulnerability in the Account module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
CVE-2024-56438 | 1 Huawei | 2 Emui, Harmonyos | 2025-01-13 | 6 Medium |
Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect availability. | ||||
CVE-2024-54098 | 1 Huawei | 2 Emui, Harmonyos | 2025-01-10 | 8.5 High |
Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity. | ||||
CVE-2023-3228 | 1 Fossbilling | 1 Fossbilling | 2025-01-02 | 5.7 Medium |
Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0. | ||||
CVE-2023-3229 | 1 Fossbilling | 1 Fossbilling | 2025-01-02 | 6.5 Medium |
Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0. | ||||
CVE-2024-2151 | 1 Oretnom23 | 1 Online Mobile Store Management System | 2024-12-20 | 4.3 Medium |
A vulnerability classified as problematic was found in SourceCodester Online Mobile Management Store 1.0. Affected by this vulnerability is an unknown functionality of the component Product Price Handler. The manipulation of the argument quantity with the input -1 leads to business logic errors. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255583. | ||||
CVE-2024-4046 | 1 Huawei | 2 Emui, Harmonyos | 2024-12-09 | 6.4 Medium |
Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. | ||||
CVE-2024-32999 | 1 Huawei | 2 Emui, Harmonyos | 2024-12-09 | 6.8 Medium |
Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability. | ||||
CVE-2023-6832 | 1 Microweber | 1 Microweber | 2024-11-27 | 4.3 Medium |
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0. | ||||
CVE-2024-6446 | 1 Gitlab | 1 Gitlab | 2024-11-21 | 3.5 Low |
An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.3 prior to 17.3.2. A crafted URL could be used to trick a victim to trust an attacker controlled application. | ||||
CVE-2024-39671 | 1 Huawei | 2 Emui, Harmonyos | 2024-11-21 | 9.3 Critical |
Access control vulnerability in the security verification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
CVE-2023-7271 | 1 Huawei | 2 Emui, Harmonyos | 2024-11-21 | 5.5 Medium |
Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability. | ||||
CVE-2023-6566 | 1 Microweber | 1 Microweber | 2024-11-21 | 6.5 Medium |
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0. | ||||
CVE-2023-6514 | 1 Huawei | 2 Ajmd-370s, Ajmd-370s Firmware | 2024-11-21 | 8.8 High |
The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions. Successful exploitation of this vulnerability may allow attackers to access restricted functions. | ||||
CVE-2023-6017 | 1 H2o | 1 H2o | 2024-11-21 | 7.1 High |
H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL. |