Vulnerabilities (CVE)

Filtered by CWE-264
Total 5501 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-5321 1 Aimstack 1 Aim 2026-06-17 6.5 MEDIUM 6.3 MEDIUM
A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component run_view Object Handler. The manipulation of the argument Abfrage leads to erweiterte Rechte. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-58315 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.5 MEDIUM
Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58312 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.1 MEDIUM
Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-58309 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.8 MEDIUM
Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
CVE-2025-58302 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 8.4 HIGH
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58294 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58293 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.5 MEDIUM
Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58285 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.3 MEDIUM
Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58284 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.9 MEDIUM
Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58283 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.5 MEDIUM
Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58282 1 Huawei 1 Harmonyos 2026-06-17 N/A 2.8 LOW
Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58276 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 6.8 MEDIUM
Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-54654 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality
CVE-2025-54608 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: Successful exploitation of this vulnerability may cause device screen orientation to be arbitrarily set.
CVE-2025-53186 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 5.9 MEDIUM
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-53178 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 4.8 MEDIUM
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.
CVE-2025-53177 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 3.9 LOW
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.
CVE-2025-48903 1 Huawei 1 Harmonyos 2026-06-17 N/A 7.8 HIGH
Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-46587 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-20145 1 Cisco 9 8608, 8804, 8808 and 6 more 2026-06-17 N/A 5.8 MEDIUM
A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets are handled incorrectly when they are received on an ingress interface on one line card and destined out of an egress interface on another line card where the egress ACL is configured. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an egress ACL on the affected device. For more information about this vulnerability, see the section of this advisory. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.