PT-2024-6656

Name of the Vulnerable Software and Affected Versions: Power Automate for Desktop affected versions not specified Description: The issue is related to insufficient access control in the Power Automate for Desktop platform on Windows operating systems. Exploitation of this issue may allow a remote...

CVE-2024-43479: Improper Access Control

Microsoft Power Automate Desktop Remote Code Execution Vulnerability...

Microsoft Power Automate Access Control Vulnerability

Microsoft Power Automate is a low-code automation platform from Microsoft Corporation USA that allows users to create automated workflows that connect and integrate various applications and services. An access control error vulnerability exists in Microsoft Power Automate. An attacker exploiting...

PT-2024-8122 · Unknown · Power Scada Operation +2

Name of the Vulnerable Software and Affected Versions: Power Monitoring Expert, Power Operation, Power SCADA Operation affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. This...

Australia Threatens to Force Companies to Break Encryption

In 2018, Australia passed the Assistance and Access Act, which--among other things--gave the government the power to force companies to break their own encryption. The Assistance and Access Act includes key components that outline investigatory powers between government and industry. These...

Texas Instruments Fusion Digital Power Designer security vulnerability

Texas Instruments Fusion Digital Power Designer is a digital power design tool from Texas Instruments. A security vulnerability exists in Texas Instruments Fusion Digital Power Designer version 7.10.1, which originated from a vulnerability that allows a local attacker to gain access to sensitive...

SUSE CVE-2024-44953

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix deadlock during RTC update There is a deadlock when runtime suspend waits for the flush of RTC work, and the RTC work calls ufshcdrpmgetsync to wait for runtime resume. Here is deadlock backtrace: kworker/0:1...

PT-2024-33769

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the wifi: rtw89 module, where the code avoided reading out of bounds when loading TX power FW elements. The issue...

DEBIAN-CVE-2024-44976

In the Linux kernel, the following vulnerability has been resolved: ata: patamacio: Fix DMA table overflow Kolbjørn and Jonáš reported that their 32-bit PowerMacs were crashing in pata-macio since commit 09fe2bfa6b83 "ata: patamacio: Fix maxsegmentsize with PAGESIZE == 64K". For example: kernel B...

DEBIAN-CVE-2024-44953

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix deadlock during RTC update There is a deadlock when runtime suspend waits for the flush of RTC work, and the RTC work calls ufshcdrpmgetsync to wait for runtime resume. Here is deadlock backtrace: kworker/0:1...

Moderate: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

ALSA-2024:6309 Moderate: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: urllib3: proxy-authorization request header is not stripped during...

Moderate: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: urllib3: proxy-authorization request header is not stripped during...

RHEL 8 : fence-agents (RHSA-2024:6309)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6309 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or...

The possible power state of the VDA machines

This article describes all the possible power state of the VDA machines...

Texas Instruments Fusion Digital Power Designer 7.10.1 Credential Disclosure

Insufficiently Protected Credentials in Texas Instruments Fusion Digital Power Designer v.7.10.1 Credit: Gionathan Armando Reale...

CVE-2024-20085

In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944204; Issue ID: MSV-1560...

CVE-2024-20084

In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944210; Issue ID: MSV-1561...

CVE-2024-20085

In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944204; Issue ID: MSV-1560...

CVE-2024-20085

In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944204; Issue ID: MSV-1560...