Publish Advisories

GHSA-3qwx-q6x9-637h
GHSA-42jj-9j7q-98jv
GHSA-g5q9-8p2x-frc4
GHSA-rmgv-92vx-xfh9
GHSA-x3rc-h9v8-w5jq

advisories/unreviewed/2024/02/GHSA-3qwx-q6x9-637h/GHSA-3qwx-q6x9-637h.json

@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3qwx-q6x9-637h",
+  "modified": "2024-02-18T09:30:47Z",
+  "published": "2024-02-18T09:30:47Z",
+  "aliases": [
+    "CVE-2023-52378"
+  ],
+  "details": "Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perform abnormally.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52378"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2024/2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-18T07:15:08Z"
+  }
+}

advisories/unreviewed/2024/02/GHSA-42jj-9j7q-98jv/GHSA-42jj-9j7q-98jv.json

@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-42jj-9j7q-98jv",
+  "modified": "2024-02-18T09:30:47Z",
+  "published": "2024-02-18T09:30:47Z",
+  "aliases": [
+    "CVE-2023-52381"
+  ],
+  "details": "Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52381"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2024/2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-18T07:15:09Z"
+  }
+}

advisories/unreviewed/2024/02/GHSA-g5q9-8p2x-frc4/GHSA-g5q9-8p2x-frc4.json

@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g5q9-8p2x-frc4",
+  "modified": "2024-02-18T09:30:47Z",
+  "published": "2024-02-18T09:30:47Z",
+  "aliases": [
+    "CVE-2023-52380"
+  ],
+  "details": "Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52380"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2024/2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-18T07:15:09Z"
+  }
+}

advisories/unreviewed/2024/02/GHSA-rmgv-92vx-xfh9/GHSA-rmgv-92vx-xfh9.json

@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rmgv-92vx-xfh9",
+  "modified": "2024-02-18T09:30:47Z",
+  "published": "2024-02-18T09:30:47Z",
+  "aliases": [
+    "CVE-2022-48621"
+  ],
+  "details": "Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentiality.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48621"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2024/2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-306"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-18T07:15:07Z"
+  }
+}

advisories/unreviewed/2024/02/GHSA-x3rc-h9v8-w5jq/GHSA-x3rc-h9v8-w5jq.json

@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x3rc-h9v8-w5jq",
+  "modified": "2024-02-18T09:30:47Z",
+  "published": "2024-02-18T09:30:47Z",
+  "aliases": [
+    "CVE-2023-52379"
+  ],
+  "details": "Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect service confidentiality.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52379"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2024/2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-18T07:15:09Z"
+  }
+}