4470 matches found
Ivanti Avalanche Unauthenticated Stack-based Buffer Overflow (CVE-2023-46216)
Binary data ivantiavalanchecve-2023-46216.nbin...
Ivanti Endpoint Manager Mobile < 11.10.0.4 / 11.11.x < 11.11.0.2 Multiple Vulnerabilities
The version of Ivanti Endpoint Manager Mobile, formerly MobileIron Core, running on the remote host is 11.10.0.4, or 11.11.x 11.11.0.2. It is, therefore, affected by multiple vulnerabilities. - A security vulnerability has been identified allowing an unauthenticated threat actor to impersonate an...
Ivanti Secure Access Client < 22.6R1 Local Privilege Escalation (CVE-2023-41718)
The Ivanti Secure Access Client installed on the remote Windows system is prior to 22.6R1. It is, therefore, affected by a local privilege escalation vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Ivanti Secure Access Client < 22.6R1.1 Multiple Vulnerabilities
The Ivanti Secure Access Client installed on the remote Windows system is prior to 22.6R1.1. It is, therefore, affected by multiple vulnerabilities. - A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to...
CVE-2023-46262
An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery SSRF in Ivanti Avalanche Remote Control server...
CVE-2023-46262
An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery SSRF in Ivanti Avalanche Remote Control server...
Server side request forgery (ssrf)
An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery SSRF in Ivanti Avalanche Remote Control server...
CVE-2023-46262
CVE-2023-46262 affects Ivanti Avalanche. Multiple connected sources confirm an unauthenticated SSRF condition in the Avalanche Remote Control server, tied to the validateAMCWSConnection pathway. The issue allows an attacker to craft a web request and access resources without authentication, with ...
CVE-2023-46262
An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery SSRF in Ivanti Avalanche Remote Control server...
Ivanti Avalanche Printer Device Service Missing Authentication Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Ivanti Avalanche. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration o...
PT-2023-8581 · Ivanti · Ivanti Avalanche
Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions 6.4.1 and below Description: The issue is related to an unrestricted upload of files with dangerous types, which could allow a remote attacker to achieve remote code execution. This vulnerability can be exploited by...
Ivanti Avalanche EnterpriseServer Service Unrestricted File Upload Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Ivanti Avalanche. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the saveConfig...
Ivanti Avalanche Smart Device Service Missing Authentication Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Ivanti Avalanche. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration o...
PT-2023-8294 · Ivanti · Ivanti Avalanche
Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche affected versions not specified Description: The issue is related to a Denial of Service DoS that can be caused by an attacker sending specially crafted data packets to the Mobile Device Server, resulting in memory corruption...
PT-2023-8329 · Ivanti · Ivanti Avalanche
Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche affected versions not specified Description: The issue is related to a stack-based buffer overflow in the WLAvalancheService of the Ivanti Avalanche mobile device management system. This can be exploited by an attacker sendin...
PT-2023-8293 · Ivanti · Ivanti Avalanche
Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions affected versions not specified Description: The issue is related to insufficient exception handling in the WLAvalancheService of the Ivanti Avalanche mobile device management system. An attacker can exploit this by...
PT-2023-8332 · Ivanti · Ivanti Avalanche
Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions affected versions not specified Description: The issue is related to a stack-based buffer overflow in the WLAvalancheService of the Ivanti Avalanche system, which can be exploited by an attacker sending specially...
PT-2023-8330 · Ivanti · Ivanti Avalanche
Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions affected versions not specified Description: The issue is related to a stack-based buffer overflow in the WLAvalancheService of the Ivanti Avalanche mobile device management system. This can be exploited by an attack...
PT-2023-8331 · Ivanti · Ivanti Avalanche
Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions affected versions not specified Description: The issue is related to a stack-based buffer overflow in the WLAvalancheService of the Ivanti Avalanche system, which can be exploited by an attacker sending specially...