12310 matches found
CVE-2021-23280
Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s mapssrv.js allows an attacker to upload a malicious NodeJS file using uploadBackgroud action. An attacker can upload a malicious code or execute any command using a speciall...
CVE-2021-23276
Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit the vulnerability. Successful exploitation of this vulnerability can allow attackers to add users in the data base...
CVE-2021-23278
Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/mapssrv.js with action removeBackground and server/nodeupgradesrv.js with action removeFirmware. An attacker can send specially...
CVE-2021-23279
Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in metadriversrv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete...
File Upload Vulnerability in Flagship Edition of Huatian Power Collaboration Office System
Dalian Huatian Software Co., Ltd. is a high-tech enterprise formed in accordance with the international advanced management mode and system, is a leading technology known as the collaborative management software company, in the collaborative platform, workflow technology and intelligent reporting...
Citrix PVS: Target Devices giving error message "login request timed out " after Power Outage
After an interruption in service, some target devices are giving an error "login request timed out"...
Critical Flaws Affecting GE's Universal Relay Pose Threat to Electric Utilities
The U.S. Cybersecurity and Infrastructure Security Agency CISA has warned of critical security shortcomings in GE's Universal Relay UR family of power management devices. "Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, reboot the UR, gain...
CISA Warns of Security Flaws in GE Power Management Devices
The U.S. Cybersecurity & Infrastructure Security Agency CISA is warning of critical-severity security flaws in GE’s Universal Relay UR family of power management devices. GE’s UR devices are the “basis of simplified power management for the protection of critical assets,” according to the company...
[SECURITY] Fedora 34 Update: powerdevil-5.21.3-1.fc34
Powerdevil is an utility for powermanagement. It consists of a daemon a KDED module and a KCModule for its configuration...
Hitachi ABB Power Grids eSOMS
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Low skill level to exploit Vendor: Hitachi ABB Power Grids Equipment: eSOMS Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain access...
Hitachi ABB Power Grids eSOMS Telerik
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Hitachi ABB Power Grids Equipment: eSOMS Telerik Vulnerabilities: Path Traversal, Deserialization of Untrusted Data, Improper Input Validation, Inadequate Encryption Strength, Insufficiently...
The vulnerability of Power BI report servers, related to the lack of protection for operational data, allows attackers to gain unauthorized access to protected information.
The vulnerability of Power BI report servers lies in the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Hitachi ABB Power Grids AFS Series
1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Low skill level to exploit Vendor: Hitachi ABB Power Grids Equipment: AFS Series Vulnerability: Infinite Loop 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service condition on one of the ports in a HSR ring...
CVE-2020-4831
IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 189965...
CVE-2021-26859
Microsoft Power BI Information Disclosure Vulnerability...
CVE-2021-26859
Microsoft Power BI Information Disclosure Vulnerability...
CVE-2021-26859
Microsoft Power BI Information Disclosure Vulnerability...
Information disclosure
Microsoft Power BI Information Disclosure Vulnerability...
CVE-2021-26859
CVE-2021-26859 is a Microsoft Power BI Information Disclosure vulnerability affecting Power BI Report Server versions cited as affected: 15.0.1103.234 and 15.0.1104.300 (per CNNVD). The issue is described as an information disclosure caused by excessive data output by the application, enabling an...
