Export limit exceeded: 17022 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (2419 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-101173 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 6.5 Medium |
| DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101177 | 1 Huawei | 2 Emui, Harmonyos | 2026-11-02 | 3.7 Low |
| Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
| CVE-2026-101178 | 1 Huawei | 2 Emui, Harmonyos | 2026-11-02 | 6.6 Medium |
| Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
| CVE-2026-101184 | 1 Huawei | 2 Emui, Harmonyos | 2026-11-02 | 5.5 Medium |
| Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101172 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 6.2 Medium |
| Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality. | ||||
| CVE-2026-101170 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 4 Medium |
| DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101171 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 3.6 Low |
| Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity. | ||||
| CVE-2026-101175 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 4.3 Medium |
| Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101179 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 4.7 Medium |
| Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101180 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 4.3 Medium |
| DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101181 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 5.5 Medium |
| Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
| CVE-2026-101182 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 5.9 Medium |
| Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101183 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 5.9 Medium |
| UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101185 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 5.9 Medium |
| OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
| CVE-2026-101186 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 7.5 High |
| DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101176 | 1 Huawei | 2 Emui, Harmonyos | 2026-11-02 | 7.1 High |
| Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
| CVE-2026-101174 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 5.7 Medium |
| DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-65198 | 1 Huawei | 1 Openubmc | 2026-10-22 | 8.6 High |
| Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build customization `manifest/build/customization/default_password.lua` sets `AuthenticationKey == EncryptionKey == 7df2f29369e3ac3245b2c9d46b67a0ecd055197e41808a34ef325db2f6422581` for the iBMC product build, and the community seed `account/manufacture/default_password.lua` sets both to `7a2f5b86f20233ec7b7bef49643fbf34d86d0cbf6f1f8f5c52d4f30d4536938b`. These are shipped constants, not per-unit values, and they are not rotated by the Administrator password reset, so they survive account provisioning. This is especially dangerous considering that SNMP access is mapped to full device administration privileges, including system reset and firmware upgrades. | ||||
| CVE-2016-3081 | 3 Apache, Huawei, Oracle | 34 Struts, Agile Controller-campus, Agile Controller-campus Firmware and 31 more | 2026-10-09 | 8.1 High |
| Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions. | ||||
| CVE-2020-8840 | 6 Debian, Fasterxml, Huawei and 3 more | 20 Debian Linux, Jackson-databind, Oceanstor 9000 and 17 more | 2026-10-08 | 9.8 Critical |
| FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter. | ||||