Lucene search
+L

1451 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.18 views

Ivanti Endpoint Manager GetDetectedVulnerabilitiesDataTable SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the GetDetectedVulnerabilitiesDataTable method. The issue...

7.2CVSS7.7AI score0.01776EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.11 views

Ivanti Endpoint Manager DBDR SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the DBDR class. The issue results from the lack of proper...

7.2CVSS7.7AI score0.01715EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.9 views

Ivanti Endpoint Manager GetCountForQuery SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the GetCountForQuery method. The issue results from the lack o...

7.2CVSS7.7AI score0.03396EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:00 a.m.16 views

Ivanti Endpoint Manager GetFilePath Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the GetFilePath method. The issue results from the lack of...

7.2CVSS7.3AI score0.18675EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/13 12:00 a.m.9 views

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. A SQL injection vulnerability exists in Ivanti Endpoint Manager. An attacker could exploit this vulnerability to remotely execute code...

7.2CVSS8.1AI score0.03396EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/13 12:00 a.m.9 views

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. A SQL injection vulnerability exists in Ivanti Endpoint Manager. An attacker could exploit this vulnerability to remotely execute code...

7.2CVSS7.3AI score0.68472EPSS
SaveExploits0References3
OSV
OSV
added 2024/11/12 4:15 p.m.9 views

CVE-2024-50328

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

7.2CVSS7.4AI score0.01776EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/12 4:15 p.m.8 views

CVE-2024-50327

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

7.2CVSS7.4AI score0.01054EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/12 4:15 p.m.22 views

CVE-2024-50328

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

7.2CVSS0.01776EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/12 4:15 p.m.4 views

CVE-2024-50330

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution...

9.8CVSS6.1AI score0.403EPSS
SaveExploits1References1
OSV
OSV
added 2024/11/12 4:15 p.m.10 views

CVE-2024-50329

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required...

8.8CVSS6.1AI score0.01661EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/12 4:15 p.m.22 views

CVE-2024-50329

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required...

8.8CVSS0.01661EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/12 4:15 p.m.30 views

CVE-2024-50327

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

7.2CVSS0.01054EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/12 4:15 p.m.26 views

CVE-2024-50330

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution...

9.8CVSS0.403EPSS
SaveExploits1References1
OSV
OSV
added 2024/11/12 4:15 p.m.6 views

CVE-2024-50324

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

7.2CVSS6.1AI score0.18675EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/12 4:15 p.m.7 views

CVE-2024-50322

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...

7.8CVSS5.9AI score0.06037EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/12 4:15 p.m.34 views

CVE-2024-50322

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...

7.8CVSS0.06037EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/12 4:15 p.m.7 views

CVE-2024-50323

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...

7.8CVSS7.2AI score0.00666EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/12 4:15 p.m.9 views

CVE-2024-50326

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

7.2CVSS7.4AI score0.26482EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/12 4:15 p.m.38 views

CVE-2024-50323

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...

7.8CVSS0.00666EPSS
SaveExploits0References1
Rows per page
Query Builder