CVE-2024-50122

CVE-2024-50122 is a Linux kernel vulnerability in the PCI subsystem (power control code) where a race between the power-control device rescanning and host controller probe can leave two incomplete devices and trigger a crash when removing the device via sysfs. The root cause is not fully detailed...

CVE-2024-50122 PCI: Hold rescan lock while adding devices during host probe

In the Linux kernel, the following vulnerability has been resolved: PCI: Hold rescan lock while adding devices during host probe Since adding the PCI power control code, we may end up with a race between the pwrctl platform device rescanning the bus and host controller probe functions. The latter...

CVE-2024-51513

Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption...

CVE-2024-51513

Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption...

CVE-2024-51513

CVE-2024-51513 concerns Huawei HarmonyOS’ VPN module, where processes are not fully terminated. The vulnerability can affect power consumption (impact stated). The most concrete details in the connected sources indicate a local attack vector with low attack complexity, and the Red Hat and CNVD en...

CVE-2024-51513

Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption...

CVE-2024-51513

Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption...

PT-2024-34676 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: VPN module affected versions not specified Description: The issue concerns the VPN module where processes are not fully terminated, which can be exploited to affect power consumption. There is no information provided about the estimated numbe...

PT-2024-33199 · Microsoft · Power Bi

Name of the Vulnerable Software and Affected Versions: Power BI version 4.0.0.3 Description: An issue in Lens Visual integration with Power BI allows a remote attacker to execute arbitrary code via the Natural language processing component. Recommendations: For Power BI version 4.0.0.3, consider...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a process legacy in the vpn module. The vulnerability can be exploited by an attacker t...

CVE-2024-48746

CVE-2024-48746 affects Lens Visual integration with Power BI v4.0.0.3. The issue allows a remote attacker to execute arbitrary code via the Natural Language Processing component. The vulnerability is described across multiple sources (NVD/Red Hat/CNNVD) with a high impact and CVSS v3.1 base score...

CVE-2024-48746

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

CVE-2024-48746

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

Lens Visual integration with Power BI 安全漏洞

Lens Visual integration with Power BI is a program from Lens Visual, Inc. Enhances Power BI dashboards with OpenAI and ChatGPT. A security vulnerability exists in Lens Visual integration with Power BI version v.4.0.0.3, which originates from a vulnerability that could allow a remote attacker to...

CVE-2024-10392

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handleimageupload' function in all versions up to, and including, 1.8.89. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

CVE-2024-10392 AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handleimageupload' function in all versions up to, and including, 1.8.89. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

EUVD-2024-33082

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handleimageupload' function in all versions up to, and including, 1.8.89. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

CVE-2024-10392

CVE-2024-10392 affects the WordPress plugin AI Power: Complete AI Pack (slug gpt3-ai-content-generator). All versions up to and including 1.8.89 are vulnerable to unauthenticated arbitrary file uploads via handle_image_upload (no file type validation). Multiple connected sources confirm the issue...

WordPress plugin AI Power: Complete AI Pack 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

The vulnerability of the software for managing and monitoring hardware resources of the IBM Flexible Service Processor (FSP) in IBM Power System software allows a hacker to gain access to the FSP services.

The vulnerability of the software for managing and monitoring hardware resources of the IBM Flexible Service Processor FSP in IBM Power System software is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor to gain access to FSP services...