Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2024-11-05 CVE-2024-51514 Unspecified vulnerability in Huawei Harmonyos 5.0.0
Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
local
low complexity
huawei
5.5
2024-11-05 CVE-2024-51515 Race Condition vulnerability in Huawei Harmonyos 5.0.0
Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability.
local
high complexity
huawei CWE-362
4.7
2024-11-05 CVE-2024-51516 Unspecified vulnerability in Huawei Harmonyos 5.0.0
Permission control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to function abnormally.
local
low complexity
huawei
5.5
2024-11-05 CVE-2024-9443 Cross-site Scripting vulnerability in Basticom Framework
The Basticom Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping.
network
low complexity
basticom CWE-79
5.4
2024-11-05 CVE-2024-9667 Cross-site Scripting vulnerability in Castos Seriously Simple Podcasting
The Seriously Simple Podcasting plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.5.0.
network
low complexity
castos CWE-79
6.1
2024-11-05 CVE-2024-47137 Out-of-bounds Write vulnerability in Openatom Openharmony
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write.
local
low complexity
openatom CWE-787
7.8
2024-11-05 CVE-2024-47402 Out-of-bounds Read vulnerability in Openatom Openharmony
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through out-of-bounds read.
local
low complexity
openatom CWE-125
5.5
2024-11-05 CVE-2024-47404 Double Free vulnerability in Openatom Openharmony
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through double free.
local
low complexity
openatom CWE-415
7.8
2024-11-05 CVE-2024-47797 Out-of-bounds Write vulnerability in Openatom Openharmony
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write.
local
low complexity
openatom CWE-787
7.8
2024-11-05 CVE-2024-10097 Unspecified vulnerability in Loginizer
The Loginizer Security and Loginizer plugins for WordPress are vulnerable to authentication bypass in all versions up to, and including, 1.9.2.
network
high complexity
loginizer
8.1