Lucene search
+L

12185 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2025/04/24 4:40 p.m.25 views

Security Bulletin: Vulnerability in HMC affects further privilege escalation (CVE-2025-1951) on Power HMC.

Summary Vulnerability in HMC affects further privilege escalation on Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-1951 DESCRIPTION: IBM Hardware Management Console - Power Systems could allow a local user to execute commands as ...

8.4CVSS9.2AI score0.00219EPSS
SaveExploits0Affected Software1
Citrix
Citrix
added 2025/04/24 12:00 a.m.20 views

Citrix Cloud VDIs hosted in Azure by Citrix Cloud shut down constantly with user sessions

When creating VDIs from a Master image that are rolled out with MCS into a Azure subscription - Users machines are constantly shutting down - Even when users are logged onto the machines, they consistently get shutdown after several minutes it can vary between 3-5 | 25-30 -The user will see a...

7AI score
SaveExploits0
OSV
OSV
added 2025/04/23 12:57 p.m.17 views

USN-7448-1 linux-azure, linux-azure-6.11 vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. CVE-2025-2312 Several security issues were discovered in the Linux kernel. An...

9.8CVSS6.7AI score0.00873EPSS
SaveExploits3References42
ATTACKERKB
ATTACKERKB
added 2025/04/22 3:16 p.m.6 views

CVE-2025-1950

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source...

9.3CVSS5.9AI score0.0019EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/04/22 3:16 p.m.6 views

CVE-2025-1950

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source...

7.8CVSS5.9AI score0.0019EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/22 3:16 p.m.28 views

CVE-2025-1951

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges...

8.4CVSS0.00219EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/04/22 3:16 p.m.7 views

CVE-2025-1951

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges...

8.4CVSS6.1AI score0.00219EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/04/22 3:16 p.m.6 views

CVE-2025-1951

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges...

6.7CVSS6AI score0.00219EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/22 2:48 p.m.14 views

CVE-2025-1951 IBM Hardware Management Console - Power Systems command execution

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges...

8.4CVSS7.2AI score0.00219EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/22 2:46 p.m.11 views

CVE-2025-1950 IBM Hardware Management Console - Power Systems command execution

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source...

9.3CVSS7.2AI score0.0019EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/22 10:28 a.m.41 views

Security Bulletin: Vulnerability in Apache Tomcat Server (CVE-2025-24813) affects Power HMC.

Summary The Apache Tomcat Server is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-24813 DESCRIPTION: Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicio...

10CVSS8.1AI score0.99927EPSS
SaveExploits49Affected Software1
CNNVD
CNNVD
added 2025/04/22 12:00 a.m.16 views

IBM POWER systems FSP 安全漏洞

IBM POWER systems FSP is a power systems flexible services processor from International Business Machines IBM. A security vulnerability exists in IBM POWER systems FSP versions V10.2.1030.0 and V10.3.1050.0, which stems from excessive privileges when executing commands, which could cause a local...

8.4CVSS6.5AI score0.00219EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/22 12:00 a.m.8 views

IBM Power Hardware Management Console 安全漏洞

IBM Power Hardware Management Console HMC is a suite of graphical interface software from International Business Machines IBM for configuring and managing the Power System family of servers. The software is primarily used to manage hardware such as servers. A security vulnerability exists in IBM...

9.3CVSS6.4AI score0.0019EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/22 12:00 a.m.7 views

PT-2025-17546 · Ibm · Ibm Hardware Management Console

Name of the Vulnerable Software and Affected Versions: IBM Hardware Management Console - Power Systems versions 10.2.1030.0 through 10.3.1050.0 Description: The issue allows a local user to execute commands as a privileged user due to the execution of commands with unnecessary privileges...

8.4CVSS6.5AI score0.00219EPSS
SaveExploits0References10
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/21 6:55 a.m.22 views

Security Bulletin: Vulnerability in libsoup library (CVE-2024-52531) affects Power HMC.

Summary The libsoup library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-52531 DESCRIPTION: GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in...

8.4CVSS7AI score0.00675EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2025/04/18 12:00 a.m.12 views

Siemens SENTRON 7KT PAC1260 Data Manager OS Command Injection Vulnerability (CNVD-2025-07810)

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. The Siemens SENTRON 7KT PAC1260 Data Manager suffers from an OS command injection vulnerability that stems from not cleaning up the region parameter of a specific POST request,...

9.4CVSS8AI score0.00864EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/18 12:00 a.m.8 views

IBM i 安全漏洞

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. IBM i suffers from a Content Neutralization Malpractice vulnerability that originates from a HTTP header Content Neutralization Malpractice, which can be exploited by a...

5.4CVSS6.7AI score0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/18 12:00 a.m.12 views

PT-2025-29017

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential division-by-zero error exists in the em compute costs function within the Linux kernel’s power management PM and energy management EM subsystems. This occurs when a non-CPU...

7.8CVSS7.9AI score0.01278EPSS
SaveExploits8References577
CNVD
CNVD
added 2025/04/18 12:00 a.m.10 views

Siemens SENTRON 7KT PAC1260 Data Manager Path Traversal Vulnerability

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. A path traversal vulnerability exists in Siemens SENTRON 7KT PAC1260 Data Manager, which arises from the program failing to correctly filter special elements in the path of a...

9.2CVSS6.8AI score0.00567EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/17 5:09 p.m.27 views

CVE-2025-29817

Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...

5.7CVSS6.4AI score0.00826EPSS
SaveExploits0References3
Rows per page
Query Builder