Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-54085 State: PUBLISHED Published: 2025-03-11T14:00:58.643Z Last Updated: 2025-10-21T22:55:25.234Z Vendors: AMI Products: MegaRAC-SPx Problem Types: CWE-290 Description: AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025003.pdf
CVE ID: CVE-2024-54089 State: PUBLISHED Published: 2025-02-11T10:29:00.200Z Last Updated: 2025-02-12T15:50:07.093Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Siemens Products: APOGEE PXC Series (BACnet), APOGEE PXC Series (P2 Ethernet), TALON TC Series (BACnet) Problem Types: CWE-326 Description: A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices contain a weak encryption mechanism based on a hard-coded key. This could allow an attacker to guess or decrypt the password from the cyphertext. Additional Analyst Notes: - CIS
key. This could allow an attacker to guess or decrypt the password from the cyphertext. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-615116.html
CVE ID: CVE-2024-54090 State: PUBLISHED Published: 2025-02-11T10:29:01.530Z Last Updated: 2025-02-12T15:50:23.909Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Siemens Products: APOGEE PXC Series (BACnet), APOGEE PXC Series (P2 Ethernet), TALON TC Series (BACnet) Problem Types: CWE-125 Description: A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC Series (BACnet) (All versions). Affected devices contain an out-of-bounds read in the memory dump function. This could allow an attacker with Medium (MED) or higher privileges to cause the device to enter an insecure cold st
on. This could allow an attacker with Medium (MED) or higher privileges to cause the device to enter an insecure cold start state. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-615116.html
CVE ID: CVE-2024-54091 State: PUBLISHED Published: 2024-12-10T13:54:17.315Z Last Updated: 2025-04-08T08:22:23.402Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Solid Edge SE2024, Solid Edge SE2025 Problem Types: CWE-787 Description: A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer while parsing X_T data or a specially crafted file in X_T format. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: -
format. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-979056.html - https://cert-portal.siemens.com/productcert/html/ssa-672923.html
CVE ID: CVE-2024-54092 State: PUBLISHED Published: 2025-04-08T08:22:24.861Z Last Updated: 2025-07-08T10:34:27.627Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Industrial Edge Device Kit - arm64 V1.17, Industrial Edge Device Kit - arm64 V1.18, Industrial Edge Device Kit - arm64 V1.19, Industrial Edge Device Kit - arm64 V1.20, Industrial Edge Device Kit - arm64 V1.21, Industrial Edge Device Kit - x86-64 V1.17, Industrial Edge Device Kit - x86-64 V1.18, Industrial Edge Device Kit - x86-64 V1.19, Industrial Edge Device Kit - x86-64 V1.20, Industrial Edge Device Kit - x86-64 V1.21, Industrial Edge Own Device (IEOD), Industrial Edge Virtual
it - x86-64 V1.20, Industrial Edge Device Kit - x86-64 V1.21, Industrial Edge Own Device (IEOD), Industrial Edge Virtual Device, SCALANCE LPE9413, SIMATIC IPC BX-39A Industrial Edge Device, SIMATIC IPC BX-59A Industrial Edge Device, SIMATIC IPC127E Industrial Edge Device, SIMATIC IPC227E Industrial Edge Device, SIMATIC IPC427E Industrial Edge Device, SIMATIC IPC847E Industrial Edge Device Problem Types: CWE-1390 Description: A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device Kit - arm64 V1.18 (All versions), Industrial Edge Device Kit - arm64 V1.19 (All versions), Industrial Edge Device Kit - arm64 V1.20 (All versions < V1.2
, Industrial Edge Device Kit - arm64 V1.19 (All versions), Industrial Edge Device Kit - arm64 V1.20 (All versions < V1.20.2-1), Industrial Edge Device Kit - arm64 V1.21 (All versions < V1.21.1-1), Industrial Edge Device Kit - x86-64 V1.17 (All versions), Industrial Edge Device Kit - x86-64 V1.18 (All versions), Industrial Edge Device Kit - x86-64 V1.19 (All versions), Industrial Edge Device Kit - x86-64 V1.20 (All versions < V1.20.2-1), Industrial Edge Device Kit - x86-64 V1.21 (All versions < V1.21.1-1), Industrial Edge Own Device (IEOD) (All versions < V1.21.1-1-a), Industrial Edge Virtual Device (All versions < V1.21.1-1-a), SCALANCE LPE9413 (6GK5998-3GS01-2AC2) (All versions < V2.1), SIM
trial Edge Virtual Device (All versions < V1.21.1-1-a), SCALANCE LPE9413 (6GK5998-3GS01-2AC2) (All versions < V2.1), SIMATIC IPC BX-39A Industrial Edge Device (All versions < V3.0), SIMATIC IPC BX-59A Industrial Edge Device (All versions < V3.0), SIMATIC IPC127E Industrial Edge Device (All versions < V3.0), SIMATIC IPC227E Industrial Edge Device (All versions < V3.0), SIMATIC IPC427E Industrial Edge Device (All versions < V3.0), SIMATIC IPC847E Industrial Edge Device (All versions < V3.0). Affected devices do not properly enforce user authentication on specific API endpoints when identity federation is used. This could facilitate an unauthenticated remote attacker to circumvent authenticatio
s when identity federation is used. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that identity federation is currently or has previously been used and the attacker has learned the identity of a legitimate user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-634640.html - https://cert-portal.siemens.com/productcert/html/ssa-819629.html
CVE ID: CVE-2024-54093 State: PUBLISHED Published: 2024-12-10T13:54:18.597Z Last Updated: 2024-12-10T17:20:07.590Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Solid Edge SE2024 Problem Types: CWE-122 Description: A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted ASM files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-730188.html
CVE ID: CVE-2024-54094 State: PUBLISHED Published: 2024-12-10T13:54:20.014Z Last Updated: 2024-12-10T17:20:25.501Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Solid Edge SE2024 Problem Types: CWE-122 Description: A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-730188.html
CVE ID: CVE-2024-54095 State: PUBLISHED Published: 2024-12-10T13:54:21.335Z Last Updated: 2024-12-10T17:20:36.157Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Solid Edge SE2024 Problem Types: CWE-191 Description: A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa
s. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-730188.html
CVE ID: CVE-2024-54096 State: PUBLISHED Published: 2024-12-12T11:10:17.921Z Last Updated: 2024-12-12T14:33:28.512Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-284 Description: Vulnerability of improper access control in the MTP module Impact: Successful exploitation of this vulnerability may affect integrity and accuracy. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54097 State: PUBLISHED Published: 2024-12-12T11:11:58.118Z Last Updated: 2024-12-12T15:22:50.608Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-15 Description: Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54098 State: PUBLISHED Published: 2024-12-12T11:13:47.089Z Last Updated: 2024-12-12T15:23:48.630Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-840 Description: Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54099 State: PUBLISHED Published: 2024-12-12T11:23:40.542Z Last Updated: 2025-09-18T06:37:14.074Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-552 Description: File replacement vulnerability on some devices Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54100 State: PUBLISHED Published: 2024-12-12T11:25:52.084Z Last Updated: 2024-12-12T15:25:18.911Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Vulnerability of improper access control in the secure input module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54101 State: PUBLISHED Published: 2024-12-12T11:38:12.726Z Last Updated: 2024-12-12T14:51:04.034Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54102 State: PUBLISHED Published: 2024-12-12T11:41:28.904Z Last Updated: 2024-12-12T14:51:57.063Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-362 Description: Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54103 State: PUBLISHED Published: 2024-12-12T11:57:15.877Z Last Updated: 2025-09-18T06:37:41.091Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-264 Description: Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54104 State: PUBLISHED Published: 2024-12-12T11:58:15.918Z Last Updated: 2024-12-12T14:52:52.578Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-264 Description: Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54105 State: PUBLISHED Published: 2024-12-12T11:59:19.744Z Last Updated: 2024-12-12T14:57:16.158Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-120 Description: Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54106 State: PUBLISHED Published: 2024-12-12T12:00:52.526Z Last Updated: 2024-12-12T15:00:26.436Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-248 Description: Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54107 State: PUBLISHED Published: 2024-12-12T12:01:58.309Z Last Updated: 2025-09-18T06:44:36.592Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-125 Description: Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54108 State: PUBLISHED Published: 2024-12-12T12:03:06.229Z Last Updated: 2025-09-18T06:44:59.477Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-125 Description: Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54109 State: PUBLISHED Published: 2024-12-12T12:04:06.624Z Last Updated: 2025-09-18T06:45:24.210Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-125 Description: Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54110 State: PUBLISHED Published: 2024-12-12T12:05:08.841Z Last Updated: 2025-09-18T06:45:43.115Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-1021 Description: Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54111 State: PUBLISHED Published: 2024-12-12T12:06:25.502Z Last Updated: 2024-12-12T15:02:45.095Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-345 Description: Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54112 State: PUBLISHED Published: 2024-12-12T12:07:33.564Z Last Updated: 2025-09-18T06:38:07.824Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-1021 Description: Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54113 State: PUBLISHED Published: 2024-12-12T12:09:20.044Z Last Updated: 2025-09-18T06:38:30.878Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-400 Description: Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect power consumption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54114 State: PUBLISHED Published: 2024-12-12T12:10:28.427Z Last Updated: 2024-12-12T15:43:49.188Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-754 Description: Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54115 State: PUBLISHED Published: 2024-12-12T12:11:32.505Z Last Updated: 2024-12-12T15:43:42.602Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-754 Description: Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54116 State: PUBLISHED Published: 2024-12-12T12:12:38.715Z Last Updated: 2024-12-12T15:43:21.982Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-754 Description: Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54117 State: PUBLISHED Published: 2024-12-12T12:13:38.352Z Last Updated: 2024-12-12T15:43:13.712Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-200 Description: Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54118 State: REJECTED Published: 2024-12-12T12:14:42.559Z Last Updated: 2024-12-13T01:58:36.827Z Description: No description available.
CVE ID: CVE-2024-54119 State: PUBLISHED Published: 2024-12-12T12:18:33.841Z Last Updated: 2024-12-12T15:42:59.394Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-200 Description: Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54120 State: PUBLISHED Published: 2025-01-08T02:27:52.416Z Last Updated: 2025-01-08T14:47:34.583Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-362 Description: Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/1/
CVE ID: CVE-2024-54121 State: PUBLISHED Published: 2025-01-08T03:24:36.500Z Last Updated: 2025-01-08T14:27:37.155Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-20 Description: Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/1/
CVE ID: CVE-2024-54122 State: PUBLISHED Published: 2024-12-12T12:20:06.703Z Last Updated: 2024-12-12T15:42:52.622Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-362 Description: Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/12/
CVE ID: CVE-2024-54123 State: PUBLISHED Published: 2024-11-29T00:00:00 Last Updated: 2024-11-29T18:31:00.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://backdropcms.org/security/backdrop-sa-core-2024-002
CVE ID: CVE-2024-54124 State: PUBLISHED Published: 2024-11-29T00:00:00 Last Updated: 2024-11-29T18:20:57.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.clickstudios.com.au/passwordstate-changelog.aspx - https://www.clickstudios.com.au/security/advisories/