CVE-2025-1950 IBM Hardware Management Console - Power Systems command execution

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source...

CVE-2025-1950 IBM Hardware Management Console - Power Systems command execution

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source...

IBM Power Hardware Management Console security vulnerabilities

IBM Power Hardware Management Console HMC is a suite of graphical interface software from International Business Machines IBM for configuring and managing the Power System family of servers. The software is primarily used to manage hardware such as servers. A security vulnerability exists in IBM...

PT-2025-17546 · Ibm · Ibm Hardware Management Console

Name of the Vulnerable Software and Affected Versions: IBM Hardware Management Console - Power Systems versions 10.2.1030.0 through 10.3.1050.0 Description: The issue allows a local user to execute commands as a privileged user due to the execution of commands with unnecessary privileges...

CVE-2025-1951: Execution with Unnecessary Privileges

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges...

CVE-2025-1950: Process Control

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source...

CVE-2025-32408

In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled...

Security Bulletin: Vulnerability in libsoup library (CVE-2024-52531) affects Power HMC.

Summary The libsoup library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-52531 DESCRIPTION: GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in...

Soffid Console security vulnerabilities

Soffid Console is a console management software from the Spanish company Soffid. A security vulnerability exists in Soffid Console versions prior to 3.6.32, which stems from improper handling of pam service authorization...

PT-2025-17545 · Ibm · Ibm Hardware Management Console

Name of the Vulnerable Software and Affected Versions: IBM Hardware Management Console - Power Systems versions V10.2.1030.0 through V10.3.1050.0 Description: A local privilege escalation issue has been identified, allowing local users to execute commands due to improper validation of libraries...

CVE-2025-32408

In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled...

CVE-2025-32408

In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled...

CVE-2025-32408

CVE-2025-32408 affects Soffid Console prior to 3.6.32 (specifically 3.6.31 and earlier). The root cause is mishandled authorization to use the PAM service, as described in multiple sources. The base CVSS score is low (2.5, LOCAL access, high attack complexity, no user interaction). Red Hat and ot...

CVE-2025-32408

In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled...

PT-2025-17433 · Unknown · Soffid Console

Name of the Vulnerable Software and Affected Versions: Soffid Console versions 3.5.38 through 3.5.38 Soffid Console versions 3.6.31 through 3.6.31 Description: The issue is related to the mishandling of authorization to use the pam service in Soffid Console. Additionally, necessary checks were no...

CVE-2025-32408: Incorrect Authorization

In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled...

HPESBNW04850 rev.1 - HPE Telco Unified OSS Console, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Buffer Overflow, Input Validation; Remote: Code Execution, Denial of Service DoS, Server-Side Request Forgery SSRF, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Unified OSS Console - Prior to...

CVE-2025-3790

A vulnerability classified as critical has been found in baseweb JSite 1.0. This affects an unknown part of the file /druid/index.html of the component Apache Druid Monitoring Console. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit...

CVE-2025-3790

A vulnerability classified as critical has been found in baseweb JSite 1.0. This affects an unknown part of the file /druid/index.html of the component Apache Druid Monitoring Console. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit...

CVE-2025-3790 baseweb JSite Apache Druid Monitoring Console index.html access control

A vulnerability classified as critical has been found in baseweb JSite 1.0. This affects an unknown part of the file /druid/index.html of the component Apache Druid Monitoring Console. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit...