Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-48474 State: PUBLISHED Published: 2023-09-12T07:26:27.571Z Last Updated: 2024-09-26T14:14:54.831Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: Control de Ciber Products: Control de Ciber Problem Types: CWE-400 Description: Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sending a malicious request could cause the server to check if an unrecognized component is up to date, causing a memory failure error that shuts down the process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multi
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-control-de-ciber
CVE ID: CVE-2022-48475 State: PUBLISHED Published: 2023-09-12T07:27:52.874Z Last Updated: 2024-09-26T14:14:22.455Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: Control de Ciber Products: Control de Ciber Problem Types: CWE-400 Description: Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by the attacker could cause a Buffer Overflow when the adminitrator tries to accept or delete the print query created by the request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-control
CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-control-de-ciber
CVE ID: CVE-2022-48476 State: PUBLISHED Published: 2023-04-24T12:21:25.846Z Last Updated: 2025-02-04T16:22:45.322Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: JetBrains Products: Ktor Problem Types: CWE-35 Description: In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-48477 State: PUBLISHED Published: 2023-04-24T12:21:29.223Z Last Updated: 2025-02-04T16:19:47.248Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: JetBrains Products: Hub Problem Types: CWE-918 Description: In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-48478 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T16:14:36.673Z Vendors: Huawei Products: HarmonyOS Problem Types: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Description: The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202305-0000001532778780
CVE ID: CVE-2022-48479 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T16:13:55.407Z Vendors: Huawei Products: HarmonyOS Problem Types: Out-of-bounds Read Description: The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202305-0000001532778780
CVE ID: CVE-2022-48480 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T16:13:02.521Z Vendors: Huawei Products: EMUI Problem Types: Integer Overflow to Buffer Overflow Description: Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/5/
CVE ID: CVE-2022-48481 State: PUBLISHED Published: 2023-04-28T09:22:37.543Z Last Updated: 2025-01-30T20:50:54.035Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: JetBrains Products: Toolbox App Problem Types: CWE-691 Description: In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-48482 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-01-30T15:39:04.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directory traversal. Files may have credentials, full backups, call recordings, and chat logs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.3cx.com/blog/change-log/phone-system-change-log/ - https://medium.com/%40frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88
CVE ID: CVE-2022-48483 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-01-30T16:51:25.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 files via /Electron/download directory traversal in conjunction with a path component that has a drive letter and uses backslash characters. NOTE: this issue exists because of an incomplete fix for CVE-2022-28005. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.3cx.com/blog/change-log/phone-system-change-log/ - https://medium.com/%40frycos/pwning-3cx-ph
References: - https://www.3cx.com/blog/change-log/phone-system-change-log/ - https://medium.com/%40frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88
CVE ID: CVE-2022-48486 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-17T15:26:08.493Z Vendors: Huawei Products: EMUI Problem Types: Out-of-bounds Write Description: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48487 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-08-03T15:17:54.823Z Vendors: Huawei Products: EMUI Problem Types: Privilege Defined With Unsafe Actions Description: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48488 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-16T20:32:03.975Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Business Logic Errors Description: Vulnerability of bypassing the default desktop security controls.Successful exploitation of this vulnerability may cause unauthorized modifications to the desktop. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48489 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-17T16:03:40.673Z Vendors: Huawei Products: EMUI Problem Types: Data Processing Errors Description: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48490 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-17T15:54:42.997Z Vendors: Huawei Products: EMUI Problem Types: Heap-based Buffer Overflow Description: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48491 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-17T15:53:29.175Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permission Issues Description: Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at any time. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48492 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-17T15:51:58.767Z Vendors: Huawei Products: EMUI Problem Types: Improper Access Control Description: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48493 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-17T15:48:21.262Z Vendors: Huawei Products: EMUI Problem Types: Data Processing Errors Description: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48494 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-17T15:42:55.779Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Incorrect Privilege Assignment Description: Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48495 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-17T15:40:46.533Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Exposure of Sensitive Information to an Unauthorized Actor Description: Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app information to be obtained. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48496 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-17T15:37:10.787Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48497 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-17T15:31:02.975Z Vendors: Huawei Products: EMUI Problem Types: Heap-based Buffer Overflow Description: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48498 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-12T21:01:34.644Z Vendors: Huawei Products: EMUI Problem Types: Heap-based Buffer Overflow Description: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48499 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-24T16:50:35.287Z Vendors: Huawei Products: EMUI Problem Types: Heap-based Buffer Overflow Description: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48500 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-26T18:18:15.249Z Vendors: Huawei Products: EMUI Problem Types: Improper Access Control Description: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48501 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-26T18:16:41.797Z Vendors: Huawei Products: EMUI Problem Types: Heap-based Buffer Overflow Description: Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2022-48502 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2024-08-03T15:17:55.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2 - https://syzkaller.appspot.com/bug?extid=8778f030156c6cd16d72 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b - https://security.
.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b - https://security.netapp.com/advisory/ntap-20230703-0004/
CVE ID: CVE-2022-48503 State: PUBLISHED Published: 2023-08-14T22:40:49.354Z Last Updated: 2025-10-21T23:05:41.290Z Vendors: Apple Products: macOS, tvOS, Safari, watchOS, iOS and iPadOS Problem Types: Processing web content may lead to arbitrary code execution Description: The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213345 - https://support.apple.com/en-us/HT213342 - https://support.apple.com/en-u
: - https://support.apple.com/en-us/HT213345 - https://support.apple.com/en-us/HT213342 - https://support.apple.com/en-us/HT213341 - https://support.apple.com/en-us/HT213340 - https://support.apple.com/en-us/HT213346
CVE ID: CVE-2022-48504 State: PUBLISHED Published: 2024-01-10T22:03:34.685Z Last Updated: 2025-06-03T14:26:43.421Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-48505 State: PUBLISHED Published: 2023-06-28T01:58:19.937Z Last Updated: 2024-11-27T14:49:44.019Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-48506 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2025-01-02T20:32:43.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners allows anyone to determine the order in which ballots were cast from public ballot-level data, allowing deanonymization of voted ballots, in several types of scenarios. This issue was observed for use of the following versions of Democracy Suite: 5.2, 5.4-NM, 5.5, 5.5-A, 5.5-B, 5.5-C, 5.5-D, 5.7-A, 5.10, 5.10A, 5.15. NOTE: the Democracy Suite 5.17 EAC Certificate of Conformance mentions "I
5.5-B, 5.5-C, 5.5-D, 5.7-A, 5.10, 5.10A, 5.15. NOTE: the Democracy Suite 5.17 EAC Certificate of Conformance mentions "Improved pseudo random number algorithm," which may be relevant. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://dvsorder.org - https://freedom-to-tinker.com/2023/06/14/security-analysis-of-the-dominion-imagecast-x/ - https://www.eac.gov/voting-equipment/democracy-suite-517 - https://www.eac.gov/sites/default/files/voting_system/files/D-Suite%205.17%20Certificate%20and%20Scope%20SIGNED.pdf
CVE ID: CVE-2022-48507 State: PUBLISHED Published: 2023-07-06T12:36:59.628Z Last Updated: 2024-11-20T20:35:47.690Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-294 Description: Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2022-48508 State: PUBLISHED Published: 2023-07-06T12:21:04.259Z Last Updated: 2024-11-21T14:12:37.018Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-264 Description: Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2022-48509 State: PUBLISHED Published: 2023-07-06T12:38:03.921Z Last Updated: 2024-11-19T17:00:22.497Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-476 Description: Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2022-48510 State: PUBLISHED Published: 2023-07-06T12:39:00.248Z Last Updated: 2024-11-19T16:59:53.752Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-200 Description: Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2022-48511 State: PUBLISHED Published: 2023-07-06T12:39:53.975Z Last Updated: 2024-11-19T16:59:27.754Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-843 Description: Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio features to perform abnormally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2022-48512 State: PUBLISHED Published: 2023-07-06T12:22:38.489Z Last Updated: 2024-11-19T18:55:44.280Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-122 Description: Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2022-48513 State: PUBLISHED Published: 2023-07-06T12:42:55.069Z Last Updated: 2024-11-19T18:54:04.528Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-290 Description: Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2022-48514 State: PUBLISHED Published: 2023-07-06T12:44:13.420Z Last Updated: 2024-11-19T18:48:22.320Z Vendors: Huawei Products: HarmonyOS Problem Types: CWE-200 Description: The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2022-48515 State: PUBLISHED Published: 2023-07-06T12:46:13.191Z Last Updated: 2024-11-19T18:39:24.994Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-269 Description: Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2022-48516 State: PUBLISHED Published: 2023-07-06T12:47:17.275Z Last Updated: 2024-11-19T16:59:00.378Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-200 Description: Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation of this vulnerability will affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858