PT-2025-17546 · Ibm · Ibm Hardware Management Console

Name of the Vulnerable Software and Affected Versions: IBM Hardware Management Console - Power Systems versions 10.2.1030.0 through 10.3.1050.0 Description: The issue allows a local user to execute commands as a privileged user due to the execution of commands with unnecessary privileges...

IBM Power Hardware Management Console 安全漏洞

IBM Power Hardware Management Console HMC is a suite of graphical interface software from International Business Machines IBM for configuring and managing the Power System family of servers. The software is primarily used to manage hardware such as servers. A security vulnerability exists in IBM...

Security Bulletin: Vulnerability in libsoup library (CVE-2024-52531) affects Power HMC.

Summary The libsoup library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-52531 DESCRIPTION: GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in...

IBM i 安全漏洞

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. IBM i suffers from a Content Neutralization Malpractice vulnerability that originates from a HTTP header Content Neutralization Malpractice, which can be exploited by a...

Siemens SENTRON 7KT PAC1260 Data Manager OS Command Injection Vulnerability (CNVD-2025-07810)

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. The Siemens SENTRON 7KT PAC1260 Data Manager suffers from an OS command injection vulnerability that stems from not cleaning up the region parameter of a specific POST request,...

PT-2025-29017

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential division-by-zero error exists in the em compute costs function within the Linux kernel’s power management PM and energy management EM subsystems. This occurs when a non-CPU...

Siemens SENTRON 7KT PAC1260 Data Manager Path Traversal Vulnerability

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. A path traversal vulnerability exists in Siemens SENTRON 7KT PAC1260 Data Manager, which arises from the program failing to correctly filter special elements in the path of a...

CVE-2025-29817

Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...

Chypnosis: Stealthy Secret Extraction Using Undervolting-Based Static Side-Channel Attacks

There is a growing class of static physical side-channel attacks that allow adversaries to extract secrets by probing the persistent state of a circuit. Techniques such as laser logic state imaging LLSI, impedance analysis IA, and static power analysis fall into this category. These attacks requi...

CVE-2024-58093

In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix link state exit during switch upstream function removal Before 456d8aa37d0f "PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free", we would free the ASPM link only after the last function on the b...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improper link-state exit when PCI/ASPM removes upstream functionality, which could lead to memory...

CVE-2025-29817

Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...

CVE-2025-29817

Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...

CVE-2025-29817

Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...

CVE-2025-29817

CVE-2025-29817 affects Microsoft Power Automate Desktop. The issue is an uncontrolled search path element in Power Automate that an authorized attacker can exploit to disclose information over a network, with Confidentiality impact HIGH per CVSS. The Connected sources (Microsoft MSRC entry and co...

CVE-2025-29817 Microsoft Power Automate Desktop Information Disclosure Vulnerability

...

CVE-2025-29817 Microsoft Power Automate Desktop Information Disclosure Vulnerability

...

Microsoft Power Automate Desktop Information Disclosure Vulnerability

Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...

Security Bulletin: Vulnerability in restricted bash environment (CVE-2024-56477) affects Power HMC.

Summary The restricted bash environment is enabled in Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-56477 DESCRIPTION: IBM Hardware Management Console - Power could allow an authenticated user to traverse directories on the syste...

Security Bulletin: Vulnerabilities in linux-firmware (CVE-2023-20584, CVE-2023-31315, CVE-2023-31356) affect Power HMC.

Summary The linux-firmware library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-20584 DESCRIPTION: IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an...