CVE-2021-44165

CVE-2021-44165 affects Siemens POWER METER SICAM Q100 firmware prior to v2.41. The issue is a stack-based buffer overflow in the web application that could allow a remote attacker with engineer or admin privileges to execute arbitrary code remotely. Affected devices include multiple SKUs of the S...

PT-2021-7284

Name of the Vulnerable Software and Affected Versions POWER METER SICAM Q100 versions prior to V2.41 Description A buffer overflow vulnerability has been identified in the web application of the affected firmware, which could allow a remote attacker with engineer or admin privileges to potentiall...

IBM Power System security vulnerabilities

IBM Power System is a Power processor-based server computer from IBM U.S.A. The Power System firmware has a security vulnerability that could be exploited by an attacker to gain access to sensitive information using man-in-the-middle techniques...

POWER METER SICAM Q100 security vulnerabilities

The POWER METER SICAM Q100 is a multifunctional device used to detect, report and analyze measured values and events.The POWER METER SICAM Q100 remote code execution vulnerability can be exploited by remote attackers to execute remote code...

CVE-2021-29847

BMC firmware IBM Power System S821LC Server 8001-12C OP825.50 configuration changed to allow an authenticated user to open an insecure communication channel which could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 205267...

Adobe Prelude buffer error vulnerability

Adobe Prelude is a set of video footage editing editing tools of the United States Odooby Adobe. The product is capable of editing, sequencing, and annotating video footage. Adobe Prelude suffers from a buffer error vulnerability that originates from a vulnerability that can be exploited by an...

Lenovo Fan Power Controller2 and Lenovo System Management Module authorization issue vulnerabilities

Lenovo Fan Power Controller2 Lenovo Fpc2 and Lenovo System Management Module Lenovo Smm are both products of the Chinese company Lenovo.Lenovo Fan Power Controller2 is a fan power controller firmware. Lenovo System Management Module is a system management module firmware. A security vulnerability...

Lenovo Fan Power Controller2 Authorization Issues and Vulnerabilities

Lenovo Fan Power Controller2 Lenovo Fpc2 is a fan power controller firmware from Lenovo China. A security vulnerability exists in the internal services of the Lenovo Fan Power Controller2 FPC2 and Lenovo System Management Module SMM firmware that could allow an unauthenticated attacker to execute...

CVE-2021-44165: Stack-based Buffer Overflow

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41. The affected firmware contains a buffer overflow vulnerability in the web application...

Security Bulletin: The PowerVM hypervisor can violate the isolation between peer VMs in certain scenarios

Summary A specific sequence of VM management operations from the management console HMC, Novalink, or PowerVC can lead to a violation of the isolation between peer VMs. Vulnerability Details CVEID: CVE-2021-38918 DESCRIPTION: IBM PowerVM Hypervisor through a specific sequence of VM management...

Security Bulletin: The PowerVM hypervisor is vulnerable to a carefully crafted IBMi hypervisor call that can lead to a system crash

Summary The PowerVM hypervisor is vulnerable to a carefully crafted IBMi hypervisor call that can lead to a system crash Vulnerability Details CVEID: CVE-2021-38937 DESCRIPTION: IBM PowerVM Hypervisor could allow an authenticated user to cause the system to crash using a specially crafted IBMi...

Security Bulletin: The PowerVM hypervisor can allow an attacker that gains service access to the FSP to read and write system memory

Summary On PowerVM systems an attacker that gains service access to the FSP can read and write system memory through a series of carefully crafted service procedures Vulnerability Details CVEID: CVE-2021-38917 DESCRIPTION: IBM PowerVM Hypervisor could allow an attacker that gains service access t...

CVE-2021-38937

IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a specially crafted IBMi Hypervisor call. IBM X-Force ID: 210894...

IBM PowerVM Hypervisor security vulnerabilities

IBM PowerVM Hypervisor is an application from Universal Business Machines IBM, Inc. provides a secure and scalable virtualization environment for applications built on the advanced RAS capabilities and leading performance of the Power Systems platform.An access control error vulnerability exists ...

IBM PowerVM Hypervisor security vulnerabilities

IBM PowerVM Hypervisor is an application from IBM USA, Inc. provides a secure and scalable virtualization environment for applications built on the advanced RAS capabilities and leading performance of the Power Systems platform.A denial-of-service vulnerability exists in IBM PowerVM Hypervisor th...

Security Bulletin: IBM® Db2® under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. (CVE-2021-29763)

Summary IBM® Db2® under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. Vulnerability Details CVEID: CVE-2021-29763 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect...

Solar-Log 500 has an unspecified vulnerability

Solar-Log is a data logger used to monitor photovoltaic power plants from Solar-Log GmbH in Germany. Solar-Log 500 has a security vulnerability that could be exploited by an attacker with access to the device to read sensitive information...

Security Bulletin: This Power System firmware update is being released to address DHCP issue number CVE-2018-5732

Summary POWER9/POWER8: In response to a recently reported DHCP client security vulnerability, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2018-5732. Vulnerability Details CVEID: CVE-2018-5732 DESCRIPTION: ISC DHCP is...

Security Bulletin: This Power System update is being released to address CVE-2018-0732

Summary POWER9: In response to a denial of service vulnerability in OpenSSL, a new Power Systems firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2018-0732. A malicious server can send a large prime value to a client during DHE TLS handshake causi...

Security Bulletin: This Power System update is being released to address CVE-2018-5390

Summary POWER9: In response to a denial of service vulnerability, a new Power Systems firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2018-5390. Vulnerability Details CVEID: CVE-2018-5390 DESCRIPTION: Linux Kernel is vulnerable to a denial of...