Updated 9 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list

36added in the last 30 days

526new WordPress flaws this week

391,181entries in the database

1,068 results · page 11 of 22

Feb 18, 2024Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability.CVE-2023-52375 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-52374 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com https
Feb 17, 2024Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing.CVE-2023-52373 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability.CVE-2023-52372 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Vulnerability of null references in the motor module.Successful exploitation of this vulnerability may affect availability.CVE-2023-52371 · Other software · Huawei · reported by psirt@huawei.comLow 3.5
Vulnerability of null references in the motor module.Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access.CVE-2023-52370 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity.CVE-2023-52369 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally.CVE-2023-52368 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrityCVE-2023-52367 · Other software · Huawei · reported by psirt@huawei.comHigh 7.7
Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormallyCVE-2023-52366 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Resource reuse vulnerability in the GPU module.CVE-2023-52387 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormallyCVE-2023-52365 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to bCVE-2023-52363 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to be started by mistake.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.CVE-2023-52362 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect integrity.CVE-2023-52361 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect integrity.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.CVE-2023-52360 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record device.harmonyos.com https
Feb 17, 2024Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability.CVE-2023-52358 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability.CVE-2023-52357 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Feb 17, 2024Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentialiCVE-2023-52097 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Vulnerability of permission verification for APIs in the DownloadProviderMain module.CVE-2023-52106 · Other software · Huawei · reported by psirt@huawei.comMedium 4.4
Vulnerability of permission verification for APIs in the DownloadProviderMain module. Impact: Successful exploitation of this vulnerability will affect integrity and availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 16, 2024The nearby module has a privilege escalation vulnerability.CVE-2023-52105 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The nearby module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Vulnerability of parameters being not verified in the WMS module.CVE-2023-52104 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Buffer overflow vulnerability in the FLP module.CVE-2023-52103 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
Buffer overflow vulnerability in the FLP module. Successful exploitation of this vulnerability may cause out-of-bounds read.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com https
Jan 16, 2024Vulnerability of parameters being not verified in the WMS module.CVE-2023-52102 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Component exposure vulnerability in the Wi-Fi module.CVE-2023-52101 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
Component exposure vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service availability and integrity.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024The Celia Keyboard module has a vulnerability in access control.CVE-2023-52100 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The Celia Keyboard module has a vulnerability in access control. Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Vulnerability of foreground service restrictions being bypassed in the NMS module.CVE-2023-52099 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Permission management vulnerability in the multi-screen interaction module.CVE-2023-52116 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024The iaware module has a Use-After-Free (UAF) vulnerability.CVE-2023-52115 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The iaware module has a Use-After-Free (UAF) vulnerability. Successful exploitation of this vulnerability may affect the system functions.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Data confidentiality vulnerability in the ScreenReader module.CVE-2023-52114 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Data confidentiality vulnerability in the ScreenReader module. Successful exploitation of this vulnerability may affect service integrity.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Vulnerability of process priorities being raised in the ActivityManagerService module.CVE-2023-52108 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of process priorities being raised in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Vulnerability of permissions being not strictly verified in the WMS module.CVE-2023-52107 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of permissions being not strictly verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Denial of Service (DoS) vulnerability in the DMS module.CVE-2023-52098 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Denial of Service (DoS) vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024launchAnyWhere vulnerability in the ActivityManagerService module.CVE-2023-52113 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
launchAnyWhere vulnerability in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Unauthorized file access vulnerability in the wallpaper service module.CVE-2023-52112 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation of this vulnerability may cause features to perform abnormally.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Authorization vulnerability in the BootLoader module.CVE-2023-52111 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024The sensor module has an out-of-bounds access vulnerability.Successful exploitation of this vulnerability may affect availability.CVE-2023-52110 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The sensor module has an out-of-bounds access vulnerability.Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Vulnerability of trust relationships being inaccurate in distributed scenarios.CVE-2023-52109 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Vulnerability of trust relationships being inaccurate in distributed scenarios.CVE-2023-4566 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Vulnerability of trust relationships being inaccurate in distributed scenarios.CVE-2023-44117 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Jan 16, 2024Out-of-bounds access vulnerability in the device authentication module.CVE-2023-44112 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Dec 6, 2023Permission management vulnerability in the module for disabling Sound Booster.CVE-2023-6273 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Permission management vulnerability in the module for disabling Sound Booster. Successful exploitation of this vulnerability may cause features to perform abnormally.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Dec 6, 2023Vulnerability of unauthorized file access in the Settings app.CVE-2023-49248 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
Vulnerability of unauthorized file access in the Settings app. Successful exploitation of this vulnerability may cause unauthorized file access.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Dec 6, 2023Permission verification vulnerability in distributed scenarios.CVE-2023-49247 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Permission verification vulnerability in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Dec 6, 2023Unauthorized access vulnerability in the card management module.CVE-2023-49246 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com https
Dec 6, 2023Unauthorized access vulnerability in the Huawei Share module.CVE-2023-49245 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Unauthorized access vulnerability in the Huawei Share module. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Dec 6, 2023Permission management vulnerability in the multi-user module.CVE-2023-49244 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Dec 6, 2023Vulnerability of unauthorized access to email attachments in the email module.CVE-2023-49243 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of unauthorized access to email attachments in the email module. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Dec 6, 2023Free broadcast vulnerability in the running management module.CVE-2023-49242 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com
Dec 6, 2023API permission control vulnerability in the network management module.CVE-2023-49241 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com device.harmonyos.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.