CVE-2025-0283: Stack-based Buffer Overflow

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges...

CVE-2020-9080

There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. Vulnerability ID: HWPSIRT-2020-05272 This vulnerabilit...

Ivanti Security Controls < 2024.4.1 Privilege Escalation

The version of Ivanti Security Controls running on the remote host is prior to 2024.4.1. It is, therefore, affected by a local privilege escalation vulnerability where under specific circumstances, insecure permissions in Ivanti Security Controls before version 2024.4.1 could allow a local...

CVE-2021-26115

An OS command injection CWE-78 vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection CWE-78 vulnerability in FortiWA...

CVE-2024-9845

CVE-2024-9845 affects Ivanti Automation prior to 2024.4.0.1. The issue is due to insecure permissions, enabling a local authenticated attacker to achieve local privilege escalation. The CVSS is 3.1/3.0-based vectors with a base score of 7.8 (HIGH) and local access requirements. Remediation: upgra...

CVE-2024-11597: Incorrect Default Permissions

Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-8496: Incorrect Default Permissions

Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-10251: Incorrect Default Permissions

Under specific circumstances, insecure permissions in Ivanti Security Controls before version 2024.4.1 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-9845: Incorrect Default Permissions

Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-10256

Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files...

CVE-2024-7572

Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated attacker to delete arbitrary files...

CVE-2024-7572

CVE-2024-7572 affects Ivanti Desktop and Server Management (DSM). The issue arises from insufficient permissions in DSM prior to 2024.3.5740, allowing a local authenticated attacker (low privileges) to delete arbitrary files, with impact rated high (I and A) and local attack vector. A fixed versi...

CVE-2024-7572

Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated attacker to delete arbitrary files...

CVE-2024-8540

Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components...

CVE-2024-10256

CVE-2024-10256 affects Ivanti Patch SDK. The issue is insufficient permissions in Ivanti Patch SDK before version 9.7.703, enabling a local authenticated attacker to delete arbitrary files. The vulnerability is documented across multiple sources (Red Hat, CNVD, CVE listings) with a CVSSv3.1 base ...

CVE-2024-10256

Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files...

CVE-2024-10256

Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files...

PT-2024-38426 · Ivanti · Ivanti Dsm

Name of the Vulnerable Software and Affected Versions: Ivanti DSM versions prior to 2024.3.5740 Description: The issue is related to insufficient permissions in Ivanti DSM, allowing a local authenticated attacker to delete arbitrary files. Recommendations: For versions prior to 2024.3.5740, updat...

CVE-2024-8540: Incorrect Permission Assignment for Critical Resource

Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components...

CVE-2024-10256: Incorrect Permission Assignment for Critical Resource

Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files...