4473 matches found
CVE-2024-50324
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-50324
CVE-2024-50324 affects Ivanti Endpoint Manager (EPM) with a path traversal flaw that, when exploited by a remote authenticated attacker with admin privileges, leads to remote code execution. The issue is fixed in the 2024 November Security Update (EPM 2024) or 2022 SU6 November Security Update; p...
CVE-2024-50323
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...
CVE-2024-50323
CVE-2024-50323 (Ivanti Endpoint Manager) is a SQL injection vulnerability in Ivanti Endpoint Manager prior to the 2024 November Security Update or 2022 SU6 November Security Update. It can allow a local unauthenticated attacker to achieve code execution, with user interaction required. Affected p...
CVE-2024-50323
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...
CVE-2024-50322
Ivanti Endpoint Manager CVE-2024-50322 is a path-traversal vulnerability that allows a local, unauthenticated attacker to achieve code execution; exploitation requires user interaction. Affected software includes EPM before the 2024 November Security Update or 2022 SU6 November Security Update. T...
CVE-2024-50322
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...
CVE-2024-50331
An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory...
CVE-2024-50331
An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory...
CVE-2024-50331
Ivanti Avalanche contains an out-of-bounds read vulnerability (CVE-2024-50331) in versions prior to 6.4.6. The issue allows a remote unauthenticated attacker to leak sensitive information from memory via network access. The vulnerability is documented across multiple sources as affecting Ivanti A...
CVE-2024-50321
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-50321
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-50321
CVE-2024-50321 affects Ivanti Avalanche prior to 6.4.6. The issue is an infinite loop in the WLAvalancheService (listening on TCP port 1777 per ZDI) that allows a remote unauthenticated attacker to cause a denial of service. Public details consistently describe a loop without an exit condition as...
CVE-2024-50320
Ivanti Avalanche vulnerability CVE-2024-50320 affects Ivanti Avalanche before 6.4.6. The issue is an infinite loop in the WLAvalancheService (listening on TCP port 1777 by default) that can be exploited remotely by an unauthenticated attacker to cause a denial of service. Public-angle sources con...
CVE-2024-50320
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-50320
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-50319
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-50319
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-50319
CVE-2024-50319 affects Ivanti Avalanche prior to 6.4.6. The vulnerability is an infinite loop in the WLAvalancheService that can be triggered remotely by an unauthenticated attacker, leading to a denial of service. The issue appears to involve a lack of proper exit conditions in a loop and is ass...