CVE-2024-47907

CVE-2024-47907 describes a stack-based buffer overflow in the IPsec component of Ivanti Connect Secure, before version 22.7R2.3, allowing a remote unauthenticated attacker to cause a denial of service. Affected product: Ivanti Connect Secure (ICS). Connected sources consistently confirm the issue...

CVE-2024-50331

Ivanti Avalanche contains an out-of-bounds read vulnerability (CVE-2024-50331) in versions prior to 6.4.6. The issue allows a remote unauthenticated attacker to leak sensitive information from memory via network access. The vulnerability is documented across multiple sources as affecting Ivanti A...

CVE-2024-50321

An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-50321

An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-50321

CVE-2024-50321 affects Ivanti Avalanche prior to 6.4.6. The issue is an infinite loop in the WLAvalancheService (listening on TCP port 1777 per ZDI) that allows a remote unauthenticated attacker to cause a denial of service. Public details consistently describe a loop without an exit condition as...

CVE-2024-50320

An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-50319

CVE-2024-50319 affects Ivanti Avalanche prior to 6.4.6. The vulnerability is an infinite loop in the WLAvalancheService that can be triggered remotely by an unauthenticated attacker, leading to a denial of service. The issue appears to involve a lack of proper exit conditions in a loop and is ass...

CVE-2024-50318

Summary: CVE-2024-50318 is a null pointer dereference in Ivanti Avalanche before 6.4.6 that allows a remote unauthenticated attacker to cause a denial of service. The issue affects Ivanti Avalanche versions prior to 6.4.6 and is tied to the WLAvalancheService component (service listens on port TC...

CVE-2024-50317

A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-50317

CVE-2024-50317 affects Ivanti Avalanche before 6.4.6. The issue is a null pointer dereference in the WLAvalancheService (listening on TCP port 1777) that allows a remote unauthenticated attacker to cause a denial of service. Impact is DoS without authentication; vulnerability is fixed in version ...

PT-2024-32883 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.3 Description: A stack-based buffer overflow in IPsec allows a remote unauthenticated attacker to cause a denial of service. Recommendations: For versions prior to 22.7R2.3, update to version...

PT-2024-27521 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.3 Description: An out of bounds read allows a remote unauthenticated attacker to trigger an infinite loop, causing a denial of service. Recommendations: For versions prior to 22.7R2.3, update to...

CVE-2024-22733

TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which could lead to a denial of service by a local or remote unauthenticated attacker...

CVE-2024-47575

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4,...

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions prior to 2024.09, which stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability that could allow a remote, unauthenticated attacker ...

Vilo 5 Mesh WiFi System 安全漏洞

Vilo 5 Mesh WiFi System is a wireless system from Vilo. A security vulnerability exists in Vilo 5 Mesh WiFi System version 5.16.1.33 and earlier, which stems from the presence of a buffer overflow vulnerability that could allow a remote, unauthenticated attacker to execute arbitrary code via the...

Critical vulnerability in multiple SICK products

A critical vulnerability has been discovered in the .sdd files of several SICK products. This vulnerability could allow a remote, unauthenticated attacker to gain access to the "Authorized Client" user role, potentially impacting the availability and integrity of the affected SICK products. Users...

Ivanti Avalanche < 6.4.5 Multiple Vulnerabilities

The version of Ivanti Avalanche running on the remote host is prior to 6.4.5. It is, therefore, is affected by multiple vulnerabilities : - A NULL pointer dereference in WLAvalancheService allows a remote unauthenticated attacker to crash the service. CVE-2024-47007 - Server-side request forgery...

CVE-2024-6762

Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the server’s memory...

Esri Portal for ArcGIS < Security 2024 Update 2 Multiple Vulnerabilities

The version of Esri Portal for ArcGIS installed is missing Security 2024 Update 2. It is, therefore, affected by multiple vulnerabilities including: - There is a local file inclusion vulnerability in Esri Portal for ArcGIS 11.2. 11.1, 11.0 and 10.9.1 that may allow a remote, unauthenticated...