CVE-2018-15865

CVE-2018-15865 affects Pulse Secure Desktop for macOS . The Ivanti bulletin consolidates multiple Pulse products and lists the macOS client as susceptible to a local privilege escalation through the "/tmp" folder. Affected versions are Pulse Secure Desktop macOS in the 5.1rX branch before 5.1R11 ...

CVE-2018-15726

The connected IVANTI advisory specifies CVE-2018-15726 as affecting Pulse Secure Desktop for macOS, with a metacharacter injection vulnerability in 9.0R1 and 5.3RX before 5.3R5 that can lead to local privilege escalation. Remediation shown in the advisory includes fixes in Pulse Secure Desktop 9....

CVE-2018-14366

CVE-2018-14366 is an Open Redirect vulnerability affecting Pulse Connect Secure and Pulse Policy Secure. The issue resides in download.cgi and can be triggered on Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4, and on Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX befo...

CVE-2018-14366

download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability...

CVE-2018-6320

A vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure PCS 8.1RX before 8.1R12 and 8.3RX before 8.3R2 and Pulse Policy Secure PPS 5.2RX before 5.2R9 and 5.4RX before 5.4R2 wherein an https Host header received from the browser is trusted without validation...

CVE-2018-6320

CVE-2018-6320 affects Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) where login.cgi improperly validates the http(s) Host header. Affected versions: PCS 8.1RX pre-8.1R12 and 8.3RX pre-8.3R2; PPS 5.2RX pre-5.2R9 and 5.4RX pre-5.4R2. The issue arises from trusting the Host header receive...

CVE-2018-15726

The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability...

CVE-2018-15749

The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability...

CVE-2018-15749

Pulse Secure Desktop for macOS is affected by CVE-2018-15749. The issue is a format string vulnerability in macOS clients versions 5.3RX prior to 5.3R5 and 9.0R1, enabling a local attacker to trigger information display (information that should not be accessible). Exploitation is local, and the i...

PT-2018-12466 · Pulse · Pulse Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions 8.1RX through 8.1R12 Pulse Connect Secure versions 8.3RX through 8.3R3 Pulse Policy Secure versions 5.2RX through 5.2R9 Pulse Policy Secure versions 5.4RX through 5.4R3 Description: The issue is related to an Ope...

PT-2018-17475 · Pulse · Pulse Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure PCS versions 8.1RX through 8.1R11 Pulse Connect Secure PCS versions 8.3RX through 8.3R1 Pulse Policy Secure PPS versions 5.2RX through 5.2R8 Pulse Policy Secure PPS versions 5.4RX through 5.4R1 Description: A vulnerabilit...

SQL Injection Vulnerability in Shenzhen Dragon Pulse Technology Website Building System

Founded in July 2005, Dragon Pulse Technology is dedicated to website construction, animation design, program development, domain name space services, network services and information services for enterprises and individuals. There is a SQL injection vulnerability in the website building system o...

agri-pulse.com XSS vulnerability

Open Bug Bounty ID: OBB-653758 Description| Value ---|--- Affected Website:| agri-pulse.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Network Manager VPNC 1.2.4 Privilege Escalation Vulnerability

Network Manager VPNC version 1.2.4 suffers from a privilege escalation vulnerability. Network Manager VPNC - Privilege Escalation CVE-2018-10900 Release URL: https://pulsesecurity.co.nz/advisories/NM-VPNC-Privesc CVE: CVE-2018-10900 Author: Denis Andzakovic Source:...

Network Manager VPNC 1.2.4 Privilege Escalation

Network Manager VPNC - Privilege Escalation CVE-2018-10900 Release URL: https://pulsesecurity.co.nz/advisories/NM-VPNC-Privesc Date Released: 21/07/2018 CVE: CVE-2018-10900 Author: Denis Andzakovic Source: https://gitlab.gnome.org/GNOME/NetworkManager-vpnc Affected Software: Network Manager VPNC ...

Debian DLA-1399-1 : ruby-passenger security update

Two flaws were discovered in ruby-passenger for Ruby Rails and Rack support that allowed attackers to spoof HTTP headers or exploit a race condition which made privilege escalation under certain conditions possible. CVE-2015-7519 Remote attackers could spoof headers passed to applications by usin...

Security Bulletin: IBM's Pulse App for QRadar is vulnerable to sensitive information exposure. (CVE-2017-1625)

Summary The product discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. Vulnerability Details CVEID: CVE-2017-1625 DESCRIPTION: IBM QRadar discloses sensitive information to unauthorized users. The information can be used to...

CVE-2025-34108

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/diskpulseenterprisebof.rb 2025-10-23 21:13:04+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

Pulse Connect Secure Multiple Vulnerabilities (SA43730)

According to its self-reported version, the version of Pulse Connect Secure running on the remote host is affected by multiple vulnerabilities. Refer to the vendor advisory for additional information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Pulse Policy Secure Multiple Vulnerabilities (SA43730)

According to its self-reported version, the version of Pulse Policy Secure running on the remote host is affected by multiple vulnerabilities. Refer to the vendor advisory for additional information. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid109920;...