Lucene search
+L

14173 matches found

Ivanti
Ivanti
added 2023/02/14 7:22 a.m.17 views

SA44588 - 2020-09: Out-of-Cycle Advisory: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.1R8.2

Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about multiple vulnerabilities resolved in Pulse Connect Secure 9.1R8.2, Pulse Policy Secure 9.1R8.2 Refer to KB43892 - What releases will Pulse Secur...

7.2CVSS8AI score0.90759EPSS
SaveExploits2
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.29 views

SA44601 - 2020-10: Security Bulletin: Multiple Vulnerabilities Resolved in Pulse Connect Secure / Pulse Policy Secure / Pulse Secure Desktop Client 9.1R9

Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about multiple vulnerabilities resolved in Pulse Connect Secure 9.1R9, Pulse Policy Secure 9.1R9 and Pulse Secure Desktop Client 9.1R9. Refer to KB438...

9.8CVSS8.7AI score0.9648EPSS
SaveExploits12
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.15 views

SA45520 - CVE's (CVE-2022-35254,CVE-2022-35258) may lead to DoS attack

Summary: An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure ICS in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R3, Ivanti Policy Secure IPS in versions prior to 9.1R17 and 22.2R3, and Ivanti Neurons for Zero-Trust Gateway in...

7.5CVSS6.9AI score0.02515EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.21 views

SA45476 - Client Side Desync Attack (Informational)

Last Modified Date Aug 24, 2026 12:35:08 AM...

5.4CVSS6AI score0.45229EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.13 views

SA44712 - 2021-02: Out-of-Cycle Advisory: Pulse Secure response to BIOS Trickboot Vulnerability

Last Modified Date Aug 24, 2026 12:35:09 AM...

2.3CVSS5.8AI score0.00249EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.23 views

SA44858 - 9.1R12 Security Fixes

Last Modified Date Aug 23, 2026 11:31:29 PM...

5.8AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.11 views

SA45653 - Cross-site Request Forgery in Login Form

Last Modified Date Aug 23, 2026 11:31:03 PM...

5.8AI score
SaveExploits0
CISA
CISA
added 2023/02/14 12:00 a.m.30 views

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address multiple vulnerabilities in Adobe software. An attacker can exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary updates...

1.4AI score
SaveExploits0References9
Adobe
Adobe
added 2023/02/14 12:00 a.m.41 views

APSB23-05 : Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves an important vulnerability. Successful exploitation could lead to security feature bypass...

5.3CVSS5.4AI score0.81875EPSS
SaveExploits5Affected Software1
Positive Technologies
Positive Technologies
added 2023/02/14 12:00 a.m.11 views

PT-2023-1470 · Adobe · Connect

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 11.4.5 and earlier Adobe Connect versions 12.1.5 and earlier Description: The issue is related to an Improper Access Control vulnerability in Adobe Connect, which could result in a Security feature bypass. An attacker...

5.3CVSS5.1AI score0.81875EPSS
SaveExploits5References9
Tenable Nessus
Tenable Nessus
added 2023/02/14 12:00 a.m.38 views

Adobe Connect <= 11.4.5 Security Feature Bypass Vulnerability (APSB23-05)

The version of Adobe Connect installed on the remote host is prior to 11.4.6. It is, therefore, affected by a vulnerability as referenced in the apsb23-05 advisory. - Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could...

5.3CVSS5.8AI score0.81875EPSS
SaveExploits5References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/02/13 7:22 p.m.24 views

Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to security restrictions bypass due to [CVE-2021-25743]

Summary kubectl is used by IBM App Connect Enterprise Certified Container for scripted calls to Kubernetes. IBM App Connect Enterprise Certified Container operands may be vulnerable to security restrictions bypass. This bulletin provides patch information to address the reported vulnerability in...

3CVSS3.7AI score0.00778EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2023/02/12 4:15 a.m.10 views

CVE-2022-42444

IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow a buffer and cause the application to crash. IBM X-Force ID: 238538...

6.5CVSS6.2AI score0.01129EPSS
SaveExploits0References2
NVD
NVD
added 2023/02/12 4:15 a.m.24 views

CVE-2022-42444

IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow a buffer and cause the application to crash. IBM X-Force ID: 238538...

6.5CVSS5.8AI score0.01129EPSS
SaveExploits0References2
Prion
Prion
added 2023/02/12 4:15 a.m.24 views

Buffer overflow

IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow a buffer and cause the application to crash. IBM X-Force ID: 238538...

4CVSS6.5AI score0.01129EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/02/12 12:00 a.m.11 views

IBM App Connect Enterprise 安全漏洞

IBM App Connect Enterprise is an operating system from International Business Machines IBM, Inc. that combines existing industry-trusted IBM Integration Bus technology with IBM App Connect Professional and new cloud-native IBM App Connect Enterprise combines existing industry-trusted IBM...

6.5CVSS6.5AI score0.01129EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2023/02/10 9:38 a.m.52 views

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance may be vulnerable to arbitrary code execution due to [CVE-2022-45907]

Summary PyTorch is used by IBM App Connect Enterprise Certified Container for mapping assistance. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance may be vulnerable to arbitrary code execution. This bulletin provides patch information to addres...

9.8CVSS9.7AI score0.01243EPSS
SaveExploits1Affected Software1
GithubExploit
GithubExploit
added 2023/02/09 10:49 a.m.10 views

Exploit for Deserialization of Untrusted Data in Apache Kafka_Connect

CVE-2023-25194 https://hackerone.com/reports/1529790 Poc...

8.8CVSS6.7AI score0.9581EPSS
SaveExploits8
CNVD
CNVD
added 2023/02/09 12:00 a.m.47 views

Unspecified Vulnerability in IBM API Connect (CNVD-2023-09609)

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from International Business Machines IBM. The product supports creating, running, managing, and securing APIs, microservices, and more. A security vulnerability exists in IBM API Connect that stems from...

7.5CVSS7.5AI score0.00645EPSS
SaveExploits0References1
NVD
NVD
added 2023/02/08 8:15 p.m.25 views

CVE-2022-34350

IBM API Connect 10.0.0.0 through 10.0.5.0, 10.0.1.0 through 10.0.1.7, and 2018.4.1.0 through 2018.4.1.20 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to...

7.5CVSS6.3AI score0.00645EPSS
SaveExploits0References2
Rows per page
Query Builder