Vulnerabilities (CVE)

Filtered by CWE-264
Total 5272 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-66319 1 Huawei 1 Harmonyos 2026-06-17 N/A 3.3 LOW
Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity.
CVE-2025-64315 1 Huawei 1 Harmonyos 2026-06-17 N/A 4.4 MEDIUM
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity.
CVE-2025-5874 2026-06-17 4.0 MEDIUM 4.6 MEDIUM
A vulnerability was found in Redash up to 10.1.0/25.1.0. It has been rated as problematic. This issue affects the function run_query of the file /query_runner/python.py of the component getattr Handler. The manipulation leads to sandbox issue. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains, that "[t]he Python data source is disabled by default and is clearly marked in our documentation as discouraged due to its security implications. Users who choose to enable it are doing so at their own risk, with full awareness that it bypasses standard safeguards."
CVE-2025-5321 1 Aimstack 1 Aim 2026-06-17 6.5 MEDIUM 6.3 MEDIUM
A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component run_view Object Handler. The manipulation of the argument Abfrage leads to erweiterte Rechte. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-58315 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.5 MEDIUM
Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58312 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.1 MEDIUM
Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-58309 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.8 MEDIUM
Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
CVE-2025-58302 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 8.4 HIGH
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58294 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58293 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.5 MEDIUM
Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58285 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.3 MEDIUM
Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58284 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.9 MEDIUM
Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58283 1 Huawei 1 Harmonyos 2026-06-17 N/A 5.5 MEDIUM
Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58282 1 Huawei 1 Harmonyos 2026-06-17 N/A 2.8 LOW
Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58276 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 6.8 MEDIUM
Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-54654 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality
CVE-2025-54608 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: Successful exploitation of this vulnerability may cause device screen orientation to be arbitrarily set.
CVE-2025-53186 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 5.9 MEDIUM
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-53178 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 4.8 MEDIUM
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.
CVE-2025-53177 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 3.9 LOW
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.