14003 matches found
CVE-2023-41967: Sensitive Information Uncleared Before Debug/Power State Transition
Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic password and physical access to the Controller to view its configuration through the diagnostic web pages. This issue...
IBM i License Issues Vulnerabilities
IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. An authorization issue vulnerability exists in IBM i Access Client Solutions that stems from improper privilege checking and can be exploited by an attacker to execute...
Schneider Electric EcoStruxure Power Monitoring Expert GetFilteredSinkProvider Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Monitoring Expert. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetFilteredSinkProvider method. The issue...
Power Platform Connector API Information Representation Issue
The vulnerability of the Microsoft Power Platform Connector’s application programming interface is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to carry out a spear-phishing attack by sending the user a specially...
PT-2023-8715
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free bug in the kv parse power table function. When ps allocated by kzalloc equals to NULL, kv parse power table frees adev-pm.dpm.ps that was allocat...
IBM i Security Vulnerabilities
IBM i is a suite of operating systems from International Business Machines IBM running on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i Access Client Solutions versions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3, which stems from an encrypted password key th...
Voltronic Power SNMP Web Pro Cross-Site Scripting Vulnerability
Voltronic Power SNMP Web Pro is an SNMP network card management software from Voltronic Power. Voltronic Power SNMP Web Pro suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary code via specially crafted scripts...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed vulnerabilities in Dynamics. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service, or to impersonate another user through a Cross-Site-Scripting attack. Such an attack can lead to execution of arbitrary code in the browser of the victim, or access...
IBM AIX security vulnerabilities
IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. An elevation of privilege vulnerability exists in IBM AIX and VIOS, which can be exploited by an attacker to elevate privileges or cause a denial of service...
IBM AIX security vulnerabilities
IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. An elevation of privilege vulnerability exists in IBM AIX and VIOS, which can be exploited by an attacker to gain elevated privileges...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, gain access to sensitive data, or to impersonate another user via a cross-site scripting attack. Such an attack can lead to execution of...
CVE-2023-36019
Microsoft Power Platform Connector Spoofing Vulnerability...
CVE-2023-36019
Microsoft Power Platform Connector Spoofing Vulnerability...
CVE-2023-36019
Microsoft Power Platform Connector Spoofing Vulnerability...
Spoofing
Microsoft Power Platform Connector Spoofing Vulnerability...
CVE-2023-36019 Microsoft Power Platform Connector Spoofing Vulnerability
...
CVE-2023-36019
The CVE-2023-36019 entry applies to Microsoft Power Platform Connector (Power Platform/Logic Apps/Power Automate). The vulnerability is a Spoofing flaw that could allow an attacker to pretend to be another user via the connector, enabling impersonation with high impact (CVE-2023-36019 CVSS 9.6, e...
CVE-2023-49563
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...