CVE-2024-11006

Command injection in Ivanti Connect Secure before version 22.7R2.1 Not Applicable to 9.1Rx and Ivanti Policy Secure before version 22.7R1.1 Not Applicable to 9.1Rx allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-11006

Command injection in Ivanti Connect Secure before version 22.7R2.1 Not Applicable to 9.1Rx and Ivanti Policy Secure before version 22.7R1.1 Not Applicable to 9.1Rx allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-11006

Summary of CVE-2024-11006 : Command injection in Ivanti Connect Secure before 22.7R2.1 (not applicable to 9.1Rx) and Ivanti Policy Secure before 22.7R1.1 (not applicable to 9.1Rx) can be exploited by a remote authenticated attacker with admin privileges to achieve remote code execution. Connected...

CVE-2024-11007

Command injection in Ivanti Connect Secure before version 22.7R2.1 Not Applicable to 9.1Rx and Ivanti Policy Secure before version 22.7R1.1 Not Applicable to 9.1Rx allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-11007

CVE-2024-11007 is a real issue affecting Ivanti Connect Secure and Ivanti Policy Secure. The vulnerability is a command injection that can enable remote code execution when exploited by a remote authenticated attacker with admin privileges. Affected versions are Ivanti Connect Secure before 22.7R...

CVE-2024-8495

A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-8495

A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-8495

CVE-2024-8495 → A null pointer dereference in Ivanti Connect Secure (before 22.7R2.1) and Ivanti Policy Secure (before 22.7R1.1) allows a remote unauthenticated attacker to cause a denial of service. Connected advisories/feeds specify this as a vulnerability in the affected products and versions,...

CVE-2024-47909

Summary of CVE-2024-47909 : This is a vulnerability in Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS) causing a stack-based buffer overflow. The flaw exists in ICS before 22.7R2.3 and IPS before 22.7R1.2, allowing a remote authenticated attacker with admin privileges to trigger a deni...

CVE-2024-47909

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service...

CVE-2024-47909

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service...

CVE-2024-47907

A stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-47907

A stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-47907

CVE-2024-47907 describes a stack-based buffer overflow in the IPsec component of Ivanti Connect Secure, before version 22.7R2.3, allowing a remote unauthenticated attacker to cause a denial of service. Affected product: Ivanti Connect Secure (ICS). Connected sources consistently confirm the issue...

CVE-2024-47906

Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 Not Applicable to 9.1Rx and Ivanti Policy Secure before version 22.7R1.2 Not Applicable to 9.1Rx allows a local authenticated attacker to escalate privileges...

CVE-2024-47906

Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 Not Applicable to 9.1Rx and Ivanti Policy Secure before version 22.7R1.2 Not Applicable to 9.1Rx allows a local authenticated attacker to escalate privileges...

CVE-2024-47906

CVE-2024-47906 : Excessive binary privileges in Ivanti Connect Secure (ICS) before 22.7R2.3 and Ivanti Policy Secure (IPS) before 22.7R1.2 allow a local authenticated attacker to escalate privileges. Not applicable to 9.1Rx. Connected advisories confirm affected versions and provide explicit fixe...

CVE-2024-9420

A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution...

CVE-2024-9420

CVE-2024-9420 is a use-after-free vulnerability affecting Ivanti Connect Secure prior to 22.7R2.3 and 9.1R18.9, and Ivanti Policy Secure prior to 22.7R1.2. The issue allows a remote authenticated attacker to achieve remote code execution. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C...

CVE-2024-47905

CVE-2024-47905 describes a stack-based buffer overflow in Ivanti Connect Secure prior to 22.7R2.3 and Ivanti Policy Secure prior to 22.7R1.2. The vulnerability allows a remote authenticated attacker with admin privileges to cause a denial of service. Public sources confirm affected products and f...