CVE-2025-22454

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...

CVE-2025-22454

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...

CVE-2025-22454

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...

CVE-2025-22454: Incorrect Permission Assignment for Critical Resource

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...

CVE-2025-0889 Privilege Management for Windows – Elevation of Privilege

Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic privilege elevation of a user process...

CVE-2024-13813

Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to delete arbitrary files...

Intel High Level Synthesis Compiler 代码问题漏洞

Intel High Level Synthesis Compiler is a High Level Synthesis HLS tool from Intel Corporation. A code issue vulnerability exists in Intel High Level Synthesis Compiler prior to version 24.2, which stems from the presence of an uncontrolled search path that could allow an authenticated user to...

Intel QuickAssist Technology 缓冲区错误漏洞

Intel QuickAssist Technology is an Intel technology that improves server utilization. The technology improves server efficiency by sharing the stress of compute-intensive tasks to equalize server pressure. A buffer error vulnerability exists in Intel QuickAssist Technology versions prior to 2.2.0...

CVE-2024-13813

Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to delete arbitrary files...

CVE-2024-13843

Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data...

CVE-2024-13813

Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to delete arbitrary files...

CVE-2024-13813

Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to delete arbitrary files...

CVE-2024-13813

CVE-2024-13813 concerns Ivanti Secure Access Client. The vulnerability is due to insufficient permissions in ISAC prior to version 22.8R1, allowing a local authenticated attacker to delete arbitrary files. Affected software: Ivanti Secure Access Client (ISAC) before 22.8R1. Impact: local file del...

CVE-2024-13843

Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data...

CVE-2024-13843

Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data...

CVE-2024-13843

CVE-2024-13843 affects Ivanti Connect Secure and Ivanti Policy Secure prior to versions 22.7R2.6 and 22.7R1.3, respectively. The root issue is the cleartext storage of information, allowing a local authenticated attacker with admin privileges to read sensitive data. Impact is limited to confident...

CVE-2024-13842

A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data...

CVE-2024-13842

CVE-2024-13842 details: Ivanti Connect Secure prior to 22.7R2.3 (and Ivanti Policy Secure prior to 22.7R1.3) contains a hardcoded key that enables a local, authenticated attacker with admin privileges to read sensitive data. The vulnerability is an information disclosure issue within the admin po...

CVE-2024-13843: Cleartext Storage of Sensitive Information

Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data...

CVE-2024-13842: Use of Hard-coded Cryptographic Key

A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data...