CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8 matches found

0day.today•added 2021/04/07 12:0 a.m.•127 views

Pulse Secure VPN Arbitrary Command Execution Exploit

Pulse Secure Pulse Connect Secure versions 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure versions 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1 have an...

8CVSS0.6AI score0.93902EPSS

Exploits12

Tenable Nessus•added 2020/04/17 12:0 a.m.•44 views

Pulse Connect Secure XSS (SA3877)

According to its self-reported version, the version of Pulse Connect Secure running on the remote host is 8.3Rx prior to 8.3R3 It is, therefore, affected by a cross-site scripting vulnerability in rd.cgi due to improper header sanitization. An unauthenticated, remote attacker can exploit this, by...

6.1CVSS6.4AI score0.0012EPSS

Exploits0References2

OSV•added 2019/06/28 6:15 p.m.•1 views

CVE-2018-20809

A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure PCS 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX...

7.5CVSS5.8AI score0.03312EPSS

Exploits0References1

Prion•added 2019/06/28 6:15 p.m.•21 views

Input validation

An input validation issue has been found with loginmeeting.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2...

7.5CVSS9.3AI score0.03845EPSS

Exploits0References1Affected Software1

Prion•added 2019/04/26 2:29 a.m.•15 views

Design/Logic Flaw

XSS exists in the admin web console in Pulse Secure Pulse Connect Secure PCS 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, and 5.2RX before 5.2R12.1...

4.3CVSS6.6AI score0.00147EPSS

Exploits0References4Affected Software3

Vulnrichment•added 2019/04/26 1:39 a.m.•9 views

CVE-2019-11538

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1, an NFS problem could allow an authenticated attacker to access the contents of arbitrary files on the affected device...

7.7CVSS7AI score0.04205EPSS

Exploits1References6

Positive Technologies•added 2019/04/26 12:0 a.m.•1 views

PT-2019-12363 · Pulse · Pulse Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions 9.0RX before 9.0R3.4 Pulse Connect Secure versions 8.3RX before 8.3R7.1 Pulse Policy Secure versions 9.0RX before 9.0R3.2 Pulse Policy Secure versions 5.4RX before 5.4R7.1 Description: An unauthenticated, remote...

9.8CVSS8.7AI score0.0831EPSS

Exploits1References9