Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-03-04 | CVE-2024-58044 | Unspecified vulnerability in Huawei Emui and Harmonyos Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability. | 5.5 |
| 2025-03-04 | CVE-2024-58045 | Unspecified vulnerability in Huawei Harmonyos 5.0.0 Multi-concurrency vulnerability in the media digital copyright protection module Impact: Successful exploitation of this vulnerability may affect availability. | 4.7 |
| 2025-03-04 | CVE-2024-58046 | Unspecified vulnerability in Huawei Harmonyos 5.0.0 Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 5.5 |
| 2025-03-04 | CVE-2024-58047 | Unspecified vulnerability in Huawei Harmonyos 5.0.0 Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 5.5 |
| 2025-03-04 | CVE-2024-58048 | Unspecified vulnerability in Huawei Harmonyos 5.0.0 Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availability. | 4.7 |
| 2025-03-04 | CVE-2024-58049 | Unspecified vulnerability in Huawei Harmonyos 5.0.0 Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 5.5 |
| 2025-03-04 | CVE-2024-58050 | Unspecified vulnerability in Huawei Harmonyos 5.0.0 Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 5.5 |
| 2025-03-04 | CVE-2025-27521 | Unspecified vulnerability in Huawei Harmonyos 5.0.0 Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 5.5 |
| 2025-03-04 | CVE-2025-1306 | Cross-Site Request Forgery (CSRF) vulnerability in Spicethemes Newscrunch The Newscrunch theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.4. | 8.8 |
| 2025-03-04 | CVE-2025-1307 | Missing Authorization vulnerability in Spicethemes Newscrunch The Newscrunch theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check in the newscrunch_install_and_activate_plugin() function in all versions up to, and including, 1.8.4.1. | 9.8 |