Vulnerabilities (CVE)

Total 395535 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-56447 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 7.8 HIGH
Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-56446 1 Huawei 1 Harmonyos 2026-06-17 N/A 4.0 MEDIUM
Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-56445 1 Huawei 1 Harmonyos 2026-06-17 N/A 4.3 MEDIUM
Instruction authentication bypass vulnerability in the Findnetwork module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2024-56444 1 Huawei 1 Harmonyos 2026-06-17 N/A 7.5 HIGH
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-56443 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-56442 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 5.5 MEDIUM
Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2024-56441 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 4.1 MEDIUM
Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-56440 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2024-56439 1 Huawei 1 Harmonyos 2026-06-17 N/A 7.5 HIGH
Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-56438 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 6.0 MEDIUM
Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-56437 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.7 MEDIUM
Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2024-56436 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.5 MEDIUM
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-56435 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-56434 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 4.4 MEDIUM
UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device.
CVE-2024-56433 2026-06-17 N/A 3.6 LOW
shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.
CVE-2024-56431 1 Xiph 1 Theora 2026-06-17 N/A 9.8 CRITICAL
oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.
CVE-2024-56430 2026-06-17 N/A 2.9 LOW
OpenFHE through 1.2.3 has a NULL pointer dereference in BinFHEContext::EvalFloor in lib/binfhe-base-scheme.cpp.
CVE-2024-56429 2026-06-17 N/A 7.7 HIGH
itech iLabClient 3.7.1 relies on the hard-coded YngAYdgAE/kKZYu2F2wm6w== key (found in iLabClient.jar) for local users to read or write to the database.
CVE-2024-56428 1 Itech-gmbh 1 Ilabclient 2026-06-17 N/A 5.5 MEDIUM
The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials (from the CONFIGS table) for their servers configured in the client.
CVE-2024-56427 1 Samsung 36 Exynos 1080, Exynos 1080 Firmware, Exynos 1280 and 33 more 2026-06-17 N/A 6.5 MEDIUM
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds access via malformed RRC packets to the target.