Lucene search
+L

13897 matches found

osv_cve
osv_cve
•added 2025/04/15 5:15 p.m.•17 views

CVE-2025-29817

Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...

5.7CVSS5.7AI score0.00912EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/15 5:15 p.m.•42 views

CVE-2025-29817

Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...

5.7CVSS0.00912EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/04/15 5:15 p.m.•10 views

CVE-2025-29817

Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...

5.7CVSS5.4AI score0.00912EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/15 4:10 p.m.•12 views

CVE-2025-29817 Microsoft Power Automate Desktop Information Disclosure Vulnerability

...

5.7CVSS7AI score0.00912EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/15 4:10 p.m.•208 views

CVE-2025-29817

CVE-2025-29817 affects Microsoft Power Automate Desktop. The issue is an uncontrolled search path element in Power Automate that an authorized attacker can exploit to disclose information over a network, with Confidentiality impact HIGH per CVSS. The Connected sources (Microsoft MSRC entry and co...

5.7CVSS5.3AI score0.00912EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/04/15 4:10 p.m.•36 views

CVE-2025-29817 Microsoft Power Automate Desktop Information Disclosure Vulnerability

...

5.7CVSS0.00912EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/04/15 7:00 a.m.•110 views

Microsoft Power Automate Desktop Information Disclosure Vulnerability

Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...

5.7CVSS6.6AI score0.00912EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2025/04/15 3:52 a.m.•12 views

Security Bulletin: Vulnerability in restricted bash environment (CVE-2024-56477) affects Power HMC.

Summary The restricted bash environment is enabled in Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-56477 DESCRIPTION: IBM Hardware Management Console - Power could allow an authenticated user to traverse directories on the syste...

6.5CVSS6.4AI score0.00509EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/04/15 3:09 a.m.•25 views

Security Bulletin: Vulnerabilities in linux-firmware (CVE-2023-20584, CVE-2023-31315, CVE-2023-31356) affect Power HMC.

Summary The linux-firmware library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-20584 DESCRIPTION: IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an...

7.5CVSS7AI score0.00627EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/04/15 2:38 a.m.•29 views

Security Bulletin: This Power System update is being released to address CVE-2023-52340

Summary The Linux kernel is used by the Virtualization Management Interface in PowerVM to support network communication with the Hardware Management Console. This bulletin provides a remediation for the impacted vulnerability, CVE-2023-52340, by upgrading PowerVM and thus addressing the exposure ...

7.5CVSS7AI score0.0094EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2025/04/15 2:30 a.m.•28 views

Security Bulletin: Vulnerabilities in linux-firmware (CVE-2022-46329, CVE-2023-20592) affect Power HMC.

Summary The linux-firmware library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-46329 DESCRIPTION: Intel PROSet/Wireless WiFi and Killer WiFi products could allow a local authenticated attacker to gain elevated...

8.2CVSS6.6AI score0.01018EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/04/15 12:00 a.m.•19 views

Microsoft Power Automate security vulnerabilities

Microsoft Power Automate is a low-code automation platform from Microsoft Corporation USA that allows users to create automated workflows that connect and integrate various applications and services. A security vulnerability exists in Microsoft Power Automate that stems from insufficient control...

5.7CVSS6.1AI score0.00912EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•4 views

CVE-2025-29817: Uncontrolled Search Path Element

Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...

5.7CVSS6.1AI score0.00912EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/15 12:00 a.m.•18 views

Linux Kernel PCI Driver Heap Buffer Overflow DoS

Vulnerability of the devpmskipresume function in the drivers/base/power/main.c module – The Linux kernel’s bus device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00238EPSS
SaveExploits0References20Affected Software5
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•13 views

PT-2025-16361 · Microsoft · Power Automate

Name of the Vulnerable Software and Affected Versions: Power Automate affected versions not specified Description: The issue is related to an uncontrolled search path element in Power Automate, which allows an authorized attacker to disclose information over a network. Recommendations: At the...

6.8CVSS5.8AI score0.00912EPSS
SaveExploits0References8
Kaspersky
Kaspersky
•added 2025/04/15 12:00 a.m.•33 views

KLA82699 OSI vulnerability in Microsoft Dynamics

An information disclosure vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2025-29817 Exploitation Public exploits exist for this vulnerability. Related products...

5.7CVSS6.2AI score0.00912EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•18 views

PT-2025-29263

Name of the Vulnerable Software and Affected Versions Gigabyte motherboards affected versions not specified Intel® H110 Intel® Z170, H170, B150, Q170 Intel® Z270, H270, B250, Q270 Intel® Z370, B365 Intel® Z390, H310, B360, Q370, C246 Intel® Z490, H470, H410, W480 Intel® Z590, B560, H510, Q570...

8.2CVSS9.3AI score0.00267EPSS
SaveExploits1References22
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•17 views

PowerScale OneFS DoS

The vulnerability of the PowerScale OneFS operating system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5.3CVSS5.5AI score0.00462EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•19 views

iwl_uefi_reduce_powerSection Function Heap Buffer Overflow DoS

Vulnerability of the iwluefireducepowerSection function in the drivers/net/wireless/intel/iwlwifi/fw/uefi.c module – The driver for Intel wireless connection adapters in Linux operating systems is vulnerable to errors in its code. Exploiting this vulnerability could allow an attacker to cause a...

5.5CVSS5.6AI score0.00205EPSS
SaveExploits0References8Affected Software3
RedhatCVE
RedhatCVE
•added 2025/04/10 7:57 p.m.•62 views

CVE-2025-27736

Exposure of sensitive information to an unauthorized actor in Windows Power Dependency Coordinator allows an authorized attacker to disclose information locally...

5.5CVSS6.2AI score0.00922EPSS
SaveExploits0References3
Rows per page
Query Builder