Vulnerabilidades de Huawei
CVEs publicadas que afetam produtos de Huawei: 196 registro(s), com severidade, exploração e correções.
Harmonyos 188Emui 39Agile Controller-campus Firmware 2Oceanstor 18800f Firmware 2Oceanstor 9000 Firmware 2Berkeley-l09 Firmware 2Columbia-l29d Firmware 2Cornell-tl10b Firmware 2Dura-al00a Firmware 2Nova 3 Firmware 2Honor View 20 Firmware 2Jakarta-al00a Firmware 2Princeton-al10b Firmware 2Sydney-al00 Firmware 2Sydney-tl00 Firmware 2Sydneym-al00 Firmware 2Tony-al00b Firmware 2Tony-tl00b Firmware 2Yale-al00a Firmware 2Yale-l21a Firmware 2openBMC 2Anyoffice 1Logcenter 1Firehunter6000 Firmware 1Oceanstor 5300 V3 Firmware 1Oceanstor 5500 V3 Firmware 1Oceanstor 5600 V3 Firmware 1Oceanstor 5800 V3 Firmware 1Oceanstor 6800 V3 Firmware 1Oceanstor 18500 V3 Firmware 1Oceanstor 18500f Firmware 1Oceanstor 18800 V3 Firmware 1Oceanstor N8500 Firmware 1Oceanstor Onebox Firmware 1Alp-al00b Firmware 1Alp-tl00b Firmware 1Anne-al00 Firmware 1Ares-al00b Firmware 1Ares-al10d Firmware 1Ares-tl00chw Firmware 1
CVE-2025-58298
Média · 5.5
CWE-121 11/10/2025
Stack-based Buffer Overflow em Huawei Harmonyos
Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58297
Média · 5.5
CWE-121 11/10/2025
Stack-based Buffer Overflow em Huawei Harmonyos
Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58295
Média · 5.5
CWE-121 11/10/2025
Stack-based Buffer Overflow em Huawei Harmonyos
Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58292
Média · 5.5
CWE-27 11/10/2025
Denial of service (DoS) vulnerability in the office service. Successful exploitation of…
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58291
Média · 5.5
CWE-29 11/10/2025
Denial of service (DoS) vulnerability in the office service. Successful exploitation of…
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58290
Média · 5.5
CWE-41 11/10/2025
Denial of service (DoS) vulnerability in the office service. Successful exploitation of…
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58288
Média · 5.5
CWE-275 11/10/2025
Denial of service (DoS) vulnerability in the office service. Successful exploitation of…
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58287
Média · 5.5
CWE-416 11/10/2025
Use After Free em Huawei Harmonyos
Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58286
Média · 5.5
CWE-25 11/10/2025
Denial of service (DoS) vulnerability in the office service. Successful exploitation of…
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58285
Média · 5.5
CWE-264 11/10/2025
Permissions, Privileges, and Access Controls em Huawei Harmonyos
Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58284
Média · 5.5
CWE-264 11/10/2025
Permissions, Privileges, and Access Controls em Huawei Harmonyos
Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58283
Média · 5.5
CWE-264 11/10/2025
Permissions, Privileges, and Access Controls em Huawei Harmonyos
Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58282
Média · 5.5
CWE-264 11/10/2025
Permissions, Privileges, and Access Controls em Huawei Harmonyos
Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58278
Média · 5.5
CWE-200 11/10/2025
Exposure of Sensitive Information em Huawei Harmonyos
Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58277
Média · 5.5
CWE-200 11/10/2025
Exposure of Sensitive Information em Huawei Harmonyos
Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-54654
Média · 5.5
CWE-264 10/10/2025
Permissions, Privileges, and Access Controls em Huawei Harmonyos
Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality
CVE-2020-0069
Alta · 7.8
KEV Alta · 58 Exploit público CWE-787 10/03/2020
Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754
CVE-2020-8840
Crítica · 9.8
CWE-502 10/02/2020
Deserialization of Untrusted Data em Fasterxml Jackson-databind
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.
CVE-2019-2215
Alta · 7.8
KEV Urgente · 76 Exploit público CWE-416 11/10/2019
Android Kernel Use-After-Free Vulnerability
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
CVE-2019-0708
Crítica · 9.8
KEV Urgente · 93 Exploit público Ransomware CWE-416 16/05/2019
Microsoft Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
CVE-2016-3081
Alta · 8.1
KEV Urgente · 76 Exploit público CWE-77 26/04/2016
Apache Struts Command Injection Vulnerability
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.