PT-2022-28541

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.17 through v5.15.18 Description The issue is related to the powerpc/perf component of the Linux Kernel. It involves a problem with the power pmu disable function, which fails to properly call clear pmi irq pending...

PT-2022-28482

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.10.96 Description The issue is related to an infinite loop in the IRQ handler upon a power fault. This problem was introduced in version v5.7 and is fixed in version v5.10.97. The actual impact and attack...

PT-2022-28547

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.20 Description The issue is related to an infinite loop in the IRQ handler upon a power fault. It was introduced in version v5.7 and fixed in version v5.15.20. The actual impact and attack plausibility have...

PT-2022-28439

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.69 through 5.4.176 Description The issue is related to an infinite loop in the IRQ handler upon a power fault. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28478

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.94 through 5.10.95 Description The issue is related to the powerpc/perf component of the Linux Kernel. It involves a problem with the power pmu disable function, which fails to properly call clear pmi irq pending whe...

Microsoft Power BI Information Disclosure Vulnerability (CNVD-2022-23481)

Microsoft Power BI is an interactive data visualization software from Microsoft Corporation USA, with a primary focus on business intelligence. It is part of Microsoft Power Platform. Microsoft Power BI has an information disclosure vulnerability, and no details of the vulnerability are currently...

CVE-2022-20040

In powerhalmanagerservice, there is a possible permission bypass due to a stack-based buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219150; Issue ID: ALPS06219150...

CVE-2021-0147

Improper locking in the Power Management Controller PMC for some Intel Chipset firmware before versions pmcfwlbgc1-21ww02a and pmcfwlbgb0-21ww02a may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-0147

Improper locking in the Power Management Controller PMC for some Intel Chipset firmware before versions pmcfwlbgc1-21ww02a and pmcfwlbgb0-21ww02a may allow a privileged user to potentially enable denial of service via local access...

Stack overflow

In powerhalmanagerservice, there is a possible permission bypass due to a stack-based buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219150; Issue ID: ALPS06219150...

CVE-2022-20040

In powerhalmanagerservice, there is a possible permission bypass due to a stack-based buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219150; Issue ID: ALPS06219150...

CVE-2021-0147

Impact summary (CVE-2021-0147) : The issue is an improper locking fault in the Power Management Controller (PMC) within certain Intel Chipset firmware. This vulnerability could allow a local, authenticated attacker to cause a denial of service, as described in multiple sources. The affected PMC v...

CVE-2021-0147

Improper locking in the Power Management Controller PMC for some Intel Chipset firmware before versions pmcfwlbgc1-21ww02a and pmcfwlbgb0-21ww02a may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-23254

Microsoft Power BI Information Disclosure Vulnerability...

CVE-2022-23254

Microsoft Power BI Information Disclosure Vulnerability...

CVE-2022-23254

Microsoft Power BI Information Disclosure Vulnerability...

Information disclosure

Microsoft Power BI Information Disclosure Vulnerability...

CVE-2022-23254

CVE-2022-23254 concerns Microsoft Power BI Information Disclosure Vulnerability. Multiple connected sources describe a vulnerability in the Power BI client JS SDK (related to the error data area) that could allow a remote attacker to obtain protected information. Affected product: Power BI (inclu...

CVE-2022-23254 Microsoft Power BI Information Disclosure Vulnerability

...

CVE-2022-23312

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP9 Security Patch 1. The integrated web application "Online Help" in affected product contains a Cross-Site Scripting XSS vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious...