PT-2021-4160 · Microsoft · Power Bi Desktop

Name of the Vulnerable Software and Affected Versions: Power BI Desktop affected versions not specified Description: The issue is related to incorrect code generation management in the Power BI Desktop data visualization application. Exploitation of this issue may allow a remote attacker to execu...

KLA12219 RCE vulnerability in Microsoft Power BI

A remote code execution vulnerability was found in Microsoft Power BI. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-31984 Related products Microsoft-Power-BI CVE list CVE-2021-31984 critical KB list Solution Install necessary updates from...

Command Execution Vulnerability in Riptide Networks S5750V2-28GT4XS-L

The S5750V2-28GT4XS-L is a switch with a 45W power supply. A command execution vulnerability exists in the Riptide Networks S5750V2-28GT4XS-L, which can be exploited by an attacker to gain control of the server...

IBM AIX Input Validation Error Vulnerability

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. IBM AIX is vulnerable to an input validation error that allows a local user with higher group privileges to exploit a vulnerability in the lpd daemon. No detailed vulnerability details are...

Akamai Helps Q-dance Bring Its Tribe to Defqon.1 at Home -- a Global Virtual Festival Experience

Every year, Q-dance part of the ID&T group, a Dutch electronic music experience company, delights its die-hard fans or their "tribe" at the world's largest hardstyle festival, Defqon.1. Helicopters, simulated earthquakes, special moments like Power Hour, and amazing shows make up the unique...

Command Execution Vulnerability in Holographic AI Weak Network Comprehensive Operation and Maintenance Platform of Shenzhen Wannet Botong Investment Management Limited Partnership

Holographic AI weak electricity network integrated operation and maintenance platform is a weak electricity network integrated management platform that integrates computer network, security network, intelligent equipment network management and operation and maintenance. Shenzhen Wannet Botong...

IBM AIX 输入验证错误漏洞

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. IBM AIX is vulnerable to an input validation error that allows a local user with higher group privileges to exploit a vulnerability in the lpd daemon. No detailed vulnerability details are...

PT-2021-7330 · Bluez +5 · Bluez +5

Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: The issue is related to the incorrect saving of the Discoverable status of Bluetooth adapters when a device is powered down, which is then restored when the device is powered on again. If a...

Pakistan-linked hackers targeted Indian power company with ReverseRat

A threat actor with suspected ties to Pakistan has been striking government and energy organizations in the South and Central Asia regions to deploy a remote access trojan on compromised Windows systems, according to new research. "Most of the organizations that exhibited signs of compromise were...

[SECURITY] Fedora 33 Update: mosquitto-1.6.15-1.fc33

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

[SECURITY] Fedora 34 Update: mosquitto-2.0.11-1.fc34

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

SQL Injection Vulnerability in Huatian Power OA Office System

Huatian Power OA8000 system is a collaborative office software developed by Dalian Huatian Software Co. The Huatian Power OA8000 system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Property Integrated Billing Management Cloud Platform of Shenzhen Zhongdian Electric Power Technology Co.

Property integrated billing management system is based on cloud computing, Internet of Things and advanced intelligent billing management technology, realizes flexible access of intelligent power consumption data of electric power system and data of other intelligent terminals, supports...

SQL Injection Vulnerability in Power Operation and Maintenance Platform of Shenzhen Zhongdian Electric Power Technology Co.

Shenzhen Zhongdian Electric Power Technology Co., Ltd, the company's business scope includes power integrated automation system, automation system configuration software, digital power intelligent instrumentation. Shenzhen CLP Power Technology Co., Ltd. power operation and maintenance platform ha...

Unbreakable Enterprise kernel security update

5.4.17-2102.202.5 - sctp: delay autoasconf init until binding the first addr Xin Long Orabug: 32907967 CVE-2021-23133 CVE-2021-23133 - dm ioctl: fix out of bounds array access when no devices Mikulas Patocka Orabug: 32860491 CVE-2021-31916 - uek-rpm: update kABI lists for the new symbols Saeed...

CVE-2021-27887

Cross-site Scripting XSS vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3...

CVE-2021-27196

Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 TEGO1, MSM, GMS600, PWC600 allows an attacker with access to the IEC 61850 network with knowledge of how to reproduce th...

CVE-2021-27196

Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 TEGO1, MSM, GMS600, PWC600 allows an attacker with access to the IEC 61850 network with knowledge of how to reproduce th...

CVE-2021-26845

Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access the report is discovered. This issue affects: Hitachi ABB Power Grids eSOMS 6.0 versions prior to 6.0.4.2.2; 6.1 versions prior to 6.1.4; 6.3 versio...

Input validation

Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 TEGO1, MSM, GMS600, PWC600 allows an attacker with access to the IEC 61850 network with knowledge of how to reproduce th...