CVE-2024-50318

A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-8495

A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-8495

CVE-2024-8495 → A null pointer dereference in Ivanti Connect Secure (before 22.7R2.1) and Ivanti Policy Secure (before 22.7R1.1) allows a remote unauthenticated attacker to cause a denial of service. Connected advisories/feeds specify this as a vulnerability in the affected products and versions,...

CVE-2024-47907

CVE-2024-47907 describes a stack-based buffer overflow in the IPsec component of Ivanti Connect Secure, before version 22.7R2.3, allowing a remote unauthenticated attacker to cause a denial of service. Affected product: Ivanti Connect Secure (ICS). Connected sources consistently confirm the issue...

CVE-2024-50331

Ivanti Avalanche contains an out-of-bounds read vulnerability (CVE-2024-50331) in versions prior to 6.4.6. The issue allows a remote unauthenticated attacker to leak sensitive information from memory via network access. The vulnerability is documented across multiple sources as affecting Ivanti A...

CVE-2024-50321

An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-50321

An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-50321

CVE-2024-50321 affects Ivanti Avalanche prior to 6.4.6. The issue is an infinite loop in the WLAvalancheService (listening on TCP port 1777 per ZDI) that allows a remote unauthenticated attacker to cause a denial of service. Public details consistently describe a loop without an exit condition as...

CVE-2024-50320

An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-50319

CVE-2024-50319 affects Ivanti Avalanche prior to 6.4.6. The vulnerability is an infinite loop in the WLAvalancheService that can be triggered remotely by an unauthenticated attacker, leading to a denial of service. The issue appears to involve a lack of proper exit conditions in a loop and is ass...

CVE-2024-50318

Summary: CVE-2024-50318 is a null pointer dereference in Ivanti Avalanche before 6.4.6 that allows a remote unauthenticated attacker to cause a denial of service. The issue affects Ivanti Avalanche versions prior to 6.4.6 and is tied to the WLAvalancheService component (service listens on port TC...

CVE-2024-50317

A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-50317

CVE-2024-50317 affects Ivanti Avalanche before 6.4.6. The issue is a null pointer dereference in the WLAvalancheService (listening on TCP port 1777) that allows a remote unauthenticated attacker to cause a denial of service. Impact is DoS without authentication; vulnerability is fixed in version ...

CVE-2024-47907: Stack-based Buffer Overflow

A stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-50330: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution...

CVE-2024-50317: NULL Pointer Dereference

A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-11004: Improper Neutralization of Input During Web Page Generation

Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to obtain admin privileges. User interaction is required...

CVE-2024-8495: NULL Pointer Dereference

A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-50329: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required...

PT-2024-27521 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.3 Description: An out of bounds read allows a remote unauthenticated attacker to trigger an infinite loop, causing a denial of service. Recommendations: For versions prior to 22.7R2.3, update to...