Lucene search
+L

1451 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.11 views

Ivanti Endpoint Manager Report_Run SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the ReportRun class. The issue results from the lack of proper validation of a...

7.2CVSS7.3AI score0.68472EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.9 views

Ivanti Endpoint Manager Report_RunPatch SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the ReportRunPatch class. The issue results from the lack of proper validation of a...

7.2CVSS7.7AI score0.03163EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.15 views

Ivanti Endpoint Manager MP_QueryDetail2 SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the MPQueryDetail2 class. The issue results from the lack of proper validation of a...

7.2CVSS7.7AI score0.01715EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.9 views

Ivanti Endpoint Manager MP_VistaReport SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the MPVistaReport class. The issue results from the lack of proper validation of a...

7.2CVSS7.7AI score0.03396EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/13 12:00 a.m.9 views

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. A SQL injection vulnerability exists in Ivanti Endpoint Manager. An attacker could exploit this vulnerability to remotely execute code...

7.2CVSS8AI score0.01715EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/13 12:00 a.m.13 views

Ivanti Endpoint Manager 路径遍历漏洞

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

7.8CVSS7.1AI score0.17775EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/13 12:00 a.m.8 views

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

7.2CVSS8.1AI score0.01715EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.10 views

Ivanti Endpoint Manager EFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Alternatively, no user interaction is...

7.8CVSS6.8AI score0.17775EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/13 12:00 a.m.20 views

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures regarding SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7.4AI score0.403EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.11 views

Ivanti Endpoint Manager vulscan Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the vulsca...

8.8CVSS6.9AI score0.01661EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.10 views

Ivanti Endpoint Manager TestAllowedSQL SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Alternatively, no user interaction is...

7.8CVSS7.3AI score0.00666EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/13 12:00 a.m.8 views

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. A SQL injection vulnerability exists in Ivanti Endpoint Manager. An attacker could exploit this vulnerability to remotely execute code...

7.2CVSS7.3AI score0.68472EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/13 12:00 a.m.10 views

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

7.2CVSS8.1AI score0.03163EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/13 12:00 a.m.6 views

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

7.2CVSS7.4AI score0.03396EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/13 12:00 a.m.9 views

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

7.2CVSS7.5AI score0.01715EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/13 12:00 a.m.8 views

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

7.2CVSS7.4AI score0.03163EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.8 views

Ivanti Endpoint Manager GetComputerID SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the GetComputerID method. The issue results from the lack ...

9.8CVSS7.7AI score0.403EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.13 views

Ivanti Endpoint Manager PatchHistory SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the PatchHistory class. The issue results from the lack of proper validation of a...

7.2CVSS7.7AI score0.01715EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.12 views

Ivanti Endpoint Manager MP_QueryDetail SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the MPQueryDetail class. The issue results from the lack of proper validation of a...

7.2CVSS7.3AI score0.68472EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.10 views

Ivanti Endpoint Manager Report_Run2 SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the ReportRun2 class. The issue results from the lack of proper validation of a...

7.2CVSS7.7AI score0.03163EPSS
SaveExploits0References1
Rows per page
Query Builder