Siemens SCALANCE W700 product series security vulnerabilities

Siemens SCALANCE is a series of Ethernet switches from Siemens, Germany. It connects to Industrial Control System ICS devices, including Programmable Logic Controllers PLCs and Human Machine Interface HMI systems. A security vulnerability exists in the Siemens SCALANCE W700 product family, which...

PT-2024-3581 · Lenovo · Thinkagile +3

Name of the Vulnerable Software and Affected Versions: Lenovo ThinkSystem, ThinkAgile, NeXtScale, and Lenovo CP-CB-10 affected versions not specified SMM/SMM2 and FPC affected versions not specified Description: A command injection issue was identified in the System Management Module SMM/SMM2 and...

CVE-2024-24279

An issue in secdiskapp 1.5.1 management program for NewQ Fingerprint Encryption Super Speed Flash Disk allows attackers to gain escalated privileges via vsVerifyPassword and vsSetFingerPrintPower functions...

CVE-2023-52552

Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52552

Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52552

Huawei EMUI and Huawei HarmonyOS are affected by an input validation vulnerability located in the power module . An attacker could exploit this flaw to negatively impact the usability and availability of the affected operating systems. No specific versions are identified as vulnerable, and no inf...

CVE-2023-52552

Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52552: Improper Input Validation

Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability...

PT-2024-14622

Name of the Vulnerable Software and Affected Versions Power module affected versions not specified Description The issue is related to an input verification vulnerability in the power module. Successful exploitation of this vulnerability will affect availability. Recommendations At the moment,...

Voltronic Power ViewPower Denial of Service Vulnerability (CNVD-2025-21590)

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A denial of service vulnerability exists in Voltronic Power ViewPower Pro, which is caused due to a lack of authentication before allowing access to functionality. An attacker could exploit the...

Huawei HarmonyOS security vulnerabilities

Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a mobile operating system based on Android, and Huawei HarmonyOS, a distributed operating system developed by Huawei for the whole scenario, aiming at realizing intelligent interconnection and resource sharing among people, devices, an...

CVE-2024-31288

Server-Side Request Forgery SSRF vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize.This issue affects RapidLoad Power-Up for Autoptimize: from n/a through 2.2.11...

CVE-2024-31288 WordPress RapidLoad plugin <= 2.2.11 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize.This issue affects RapidLoad Power-Up for Autoptimize: from n/a through 2.2.11...

PT-2024-23934 · Unknown · Rapidload Power-Up For Autoptimize

Name of the Vulnerable Software and Affected Versions: RapidLoad Power-Up for Autoptimize versions 2.2.11 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means an attacker can potentially trick the server into making unauthorized requests, leading to...

CVE-2024-31288: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize.This issue affects RapidLoad Power-Up for Autoptimize: from n/a through 2.2.11...

SUSE CVE-2024-26717

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementation was split in an ACPI and OF part, but the new OF driver never initialises the client pointer which is dereferenced on power-up failures...

PT-2024-26823

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the power supply framework in the Linux kernel, which is not designed for long living in-kernel references to power supply devices. Specifically, unregistering a...

WordPress RapidLoad Power-Up for Autoptimize Plugin <= 2.2.11 is vulnerable to Server Side Request Forgery (SSRF)

Software RapidLoad Power-Up for Autoptimize Type Plugin Vulnerable versions = 2.2.11 Fixed in 2.2.12 OWASP Top 10 A5: Security Misconfiguration Classification Server Side Request Forgery SSRF CVE CVE-2024-31288 Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID...

PT-2024-22986 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write in the lpm req handler function of lpm.c due to improper input validation. This could lead to loc...

DEBIAN-CVE-2024-26784

In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: Fix NULL dereference on scmiperfdomain removal On unloading of the scmiperfdomain module got the below splat, when in the DT provided to the system under test the 'power-domain-cells' property was missing. Indeed,...