EUVD-2024-34184

Malicious code in bioql PyPI...

EUVD-2024-33589

Malicious code in bioql PyPI...

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

CVE-2024-11598

Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

CVE-2024-10630

CVE-2024-10630 affects Ivanti Application Control Engine. A race condition in versions prior to 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality. The issue is documented across multiple sources (Ivanti security advisory, Red Hat/CISA entries, PT-sec...

Security Advisory - Ivanti Application Control Engine (CVE-2024-10630)

Summary Ivanti has released updates for Ivanti Application Control Engine which address a high severity vulnerability. Successful exploitation could lead to bypassing configured protections. We are not aware of any customers being exploited by this vulnerability at the time of disclosure...

PT-2025-1601 · Ivanti · Ivanti Application Control Engine

Name of the Vulnerable Software and Affected Versions: Ivanti Application Control Engine versions prior to 10.14.4.0 Description: A race condition in the software allows a local authenticated attacker to bypass the application blocking functionality. Recommendations: For versions prior to...

Ivanti Application Control security vulnerabilities

Ivanti Application Control is an application control software from Ivanti Corporation, USA. A security vulnerability previously existed in Ivanti Application Control version 10.14.4.0, which stemmed from the inclusion of a race condition issue. Allowing a locally authenticated attacker to exploit...

CVE-2024-10630: Race Condition within a Thread

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

CVE-2024-11598

Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-11598

Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-11598

Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-11598

Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-11598

Ivanti Application Control is affected by CVE-2024-11598 due to insecure permissions that enable local privilege escalation for a local authenticated attacker. Affected versions are pre-2024.3 HF1, pre-2024.1 HF2, and pre-2023.3 HF3. Mitigation: upgrade to 2024.3 HF1, 2024.1 HF4, or 2023.3 HF3, r...

PT-2024-17128 · Ivanti · Ivanti Application Control

Name of the Vulnerable Software and Affected Versions: Ivanti Application Control versions prior to 2024.3 HF1 Ivanti Application Control versions prior to 2024.1 HF2 Ivanti Application Control versions prior to 2023.3 HF3 Description: Under specific circumstances, insecure permissions in Ivanti...

Ivanti Application Control security vulnerabilities

Ivanti Application Control is an application control software from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Application Control that stems from improper privilege management. An attacker can exploit the vulnerability to elevate privileges...

CVE-2024-11598: Incorrect Default Permissions

Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation...