4408 matches found
CVE-2020-13793
Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption key...
CVE-2020-13793
CVE-2020-13793 affects Ivanti DSM netinst 5.1, where AD credentials are stored insecurely due to a static, hard-coded encryption key. According to the connected records, the CVSS-3.1 base score is 9.8 (CRITICAL) with network attack vector, no privileges required, and high impact on confidentialit...
CVE-2020-12441
The CVE-2020-12441 entry describes a DoS in Ivanti Service Manager HEAT Remote Control 7.4 caused by a buffer overflow in the protocol parser of the HEATRemoteService agent. The vulnerability can be triggered by a specially crafted network packet, leading to denial of service. Public details in c...
CVE-2020-12441
Denial-of-Service DoS in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer overflow in the protocol parser of the ‘HEATRemoteService’ agent. The DoS can be triggered by sending a specially crafted network packet...
Pulse Secure / Ivanti Connect Secure Detection Consolidation
Consolidation of Ivanti Connect Secure formerly Pulse Secure Connect Secure detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2019-17066
In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives HKCU when starting an application with elevated rights...
CVE-2019-17066
In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives HKCU when starting an application with elevated rights...
Design/Logic Flaw
In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives HKCU when starting an application with elevated rights...
CVE-2019-17066
Ivanti WorkSpace Control prior to 10.4.40.0 is affected by a local privilege elevation vulnerability where a user can hijack certain user registry entries (HKCU) because pwrgrid.exe checks the Current User registry hives when starting an elevated application. This is the documented root cause and...
CVE-2019-17066
In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives HKCU when starting an application with elevated rights...
Unspecified Vulnerability in Ivanti Workspace Control (CNVD-2020-33485)
Ivanti Workspace Control RES One Workspace is a set of workspace control software from Ivanti, USA. The software includes features such as user management, application management and report management. A security vulnerability exists in Ivanti WorkSpace Control versions prior to 10.4.40.0, which...
Ivanti Avalanche SQL Injection Vulnerability
Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A SQL injection vulnerability exists in Ivanti Avalanche version 6.3. The vulnerability stems from a lack of...
CVE-2020-12442
Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250...
CVE-2020-12442
Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250...
Sql injection
Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250...
CVE-2020-12442
Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250...
CVE-2020-12442
Ivanti Avalanche 6.3 is affected by CVE-2020-12442, a SQL injection due to inadequate validation of externally entered SQL statements in the database-based application. The issue is described as being vaguely associated with the Apache HTTP Server (Bug 683250) and is scored as high severity (CVSS...
Ivanti Workspace Control Information Disclosure Vulnerability
Ivanti Workspace Control RES One Workspace is a set of workspace control software from Ivanti, USA. The software includes features such as user management, application management and report management. An information disclosure vulnerability exists in Ivanti Workspace Control versions prior to...