Microsoft Windows: Allow network connectivity during connected-standby (on battery)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnetworkactivitystandbybattery.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Allow network connectivity during connected-standby on battery Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...

Microsoft Windows: Require a password when a computer wakes (on battery)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpasswdwakesbattery.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Require a password when a computer wakes on battery Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Allow standby states (S1-S3) when sleeping (plugged in)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winstandbystatesplugged.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Allow standby states S1-S3 when sleeping plugged in Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

The vulnerability of the embedded web-server software module of the APC MGE SNMP/Web Card Transverse 66074 allows a intruder to modify the device’s settings.

The vulnerability of the embedded web-server-based microprogramming software module for managing uninterruptible power supplies, the APC MGE SNMP/Web Card Transverse 66074, is caused by authentication errors. Exploiting this vulnerability could allow a malicious actor to remotely alter device...

Microsoft Windows 10: Shut down the system

This security setting determines if a user who is logged on locally to a device can shut down Windows. Shutting down domain controllers makes them unavailable to perform functions such as processing logon requests, processing Group Policy settings, and answering Lightweight Directory Access...

Red Hat ovirt-engine API and administration web portal access privilege acquisition vulnerability

Red Hat oVirt Engine is an open source virtualization management platform from Red Hat, an open source version of RHEV Enterprise Virtualization Platform. oVirt-engine API is one of the management interfaces; administration web portal is one of the web-based management portals. The administration...

CVE-2018-1074

ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts the...

CVE-2018-1074

ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts the...

Design/Logic Flaw

ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts the...

CVE-2018-1074

CVE-2018-1074 affects ovirt-engine API and administration web portal before versions 4.2.2.5 and 4.1.11.2, exposing Power Management credentials (cleartext passwords) to Host Administrators who control the hosts. This could allow escalation to power-management systems. Connected sources confirm t...

CVE-2018-1074

ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts the...

ovirt-engine: API exposes power management credentials to administrators

The ovirt-engine API and administration web portal exposed Power Management credentials including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts they control...

Solaris 10 (sparc) : 126119-02

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: CDE - Power Management Utility. The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in...

Solaris 10 (x86) : 126120-02

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: CDE - Power Management Utility. The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in...

The vulnerability of the “ACTConfig” configuration file of the ABB PCM600 energy management and configuration tool allows a hacker to crack the password and gain access to the main application.

The vulnerability of the “ACTConfig” configuration file of the ABB PCM600 energy management and configuration tool is related to insufficient calculation of the password hash using a unreliable function with a hard-coded key and initialization vector. Exploiting this vulnerability allows an...

Stable Channel Updates for Chrome OS

The Stable channel has been updated to 61.0.3163.113 Platform version: 9765.76.0 for most Chrome OS devices . This build contains a number of bug fixes, security updates, and feature enhancements. Systems will be receiving updates over the next several days. Some highlights of these changes are:...

Apple macOS Sierra AppleGraphicsPowerManagement Memory Corruption Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.AppleGraphicsPowerManagement is one of the graphics card power management components. A memory corruption vulnerability exists in the AppleGraphicsPowerManagement component in Apple macOS Sierra versions pri...

CVE-2017-7021

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "AppleGraphicsPowerManagement" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of NVIDIA’s loading driver and the Android operating system’s power management chip is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary malicious code during the loading process and the power management by the...

APC UPS Daemon 3.14.14 Privilege Escalation

Credits: fragsh3ll aka Richard Young + Contact: https://twitter.com/fragsh3ll Vendor ========== http://www.apcupsd.org Product =========== APC UPS Daemon = 3.14.14 Vulnerability Type ===================== Privilege Escalation Vendor Description ===================== Apcupsd can be used for power...