Browse CVEs

MEDIUM 6.7 CVE-2024-22026 A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execute arbitra… Endpoint Manager Mobile 12.1.0.0+ Fix from $1,6002024-05-22 HIGH 7.8 CVE-2023-34298 Pulse Secure Client SetupService Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate … Pulse Secure Desktop Client 9.1+ Fix from $1,9502024-05-03 HIGH 7.5 CVE-2024-23527 An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthentica… Avalanche 6.4.3.528+ Fix from $1,9502024-04-25 CRITICAL 9.8 CVE-2024-29204 A Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to execute ar… Avalanche 6.4.3.528+ Fix from $2,3002024-04-19 HIGH 8.8 CVE-2024-27975 An Use-after-free vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute ar… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 8.8 CVE-2024-27976 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 8.1 CVE-2024-27977 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete arbitrary files, th… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 7.1 CVE-2024-27984 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete specific type of fi… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 MEDIUM 6.5 CVE-2024-27978 A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to … Avalanche 6.4.3.528+ Fix from $1,6002024-04-19 CRITICAL 9.8 CVE-2024-24996EPSS 32% A Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to execute ar… Avalanche 6.4.3.528+ Fix from $2,3002024-04-19 HIGH 8.8 CVE-2024-24997 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 8.8 CVE-2024-24998 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 8.8 CVE-2024-24999 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 8.8 CVE-2024-25000 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 7.5 CVE-2024-24995 A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 8.8 CVE-2024-23534 An Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitra… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 8.8 CVE-2024-23535EPSS 68% A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 8.8 CVE-2024-24992EPSS 71% A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 8.8 CVE-2024-24994EPSS 68% A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 7.5 CVE-2024-24993 A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 MEDIUM 6.5 CVE-2024-24991 A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to … Avalanche 6.4.3.528+ Fix from $1,6002024-04-19 HIGH 7.5 CVE-2024-23526 An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthentica… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 7.5 CVE-2024-23528 An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthentica… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 7.5 CVE-2024-23529 An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthentica… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 7.5 CVE-2024-23530 An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthentica… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 7.5 CVE-2024-23531 An Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to perfor… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 7.5 CVE-2024-23532 An out-of-bounds Read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perfo… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 MEDIUM 6.5 CVE-2024-23533 An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an authenticate… Avalanche 6.4.3.528+ Fix from $1,6002024-04-19 CRITICAL 9.8 CVE-2024-22061 A Heap Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to execute arb… Avalanche 6.4.3.528+ Fix from $2,3002024-04-19 CRITICAL 9.8 CVE-2024-21894EPSS 19% A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious us… Connect Secure Mitigation only Fix from $2,3002024-04-04