Lucene search
+L

1210 matches found

CNNVD
CNNVD
added 2024/06/20 12:0 a.m.5 views

Absolute Secure Access Security Vulnerability

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...

4.5CVSS6.7AI score0.00268EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/20 12:0 a.m.3 views

Absolute Secure Access Security Vulnerability

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...

5.4CVSS6.7AI score0.0022EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/20 12:0 a.m.4 views

Absolute Secure Access Security Vulnerability

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...

4.5CVSS6.7AI score0.00268EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/20 12:0 a.m.4 views

PT-2024-27492 · Absolute · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.06 Description: The issue is a cross-site scripting vulnerability in the management UI of Absolute Secure Access. Attackers with system administrator permissions can interfere with other system...

4.5CVSS6.4AI score0.00268EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/06/20 12:0 a.m.5 views

Absolute Secure Access Security Vulnerability

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...

4.5CVSS6.7AI score0.00268EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/20 12:0 a.m.6 views

Absolute Secure Access Security Vulnerability

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...

4.5CVSS6.7AI score0.00268EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/20 12:0 a.m.6 views

Absolute Secure Access Security Vulnerability

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...

4.5CVSS6.7AI score0.00268EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/20 12:0 a.m.4 views

Absolute Secure Access Security Vulnerability

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...

6.5CVSS6.7AI score0.0028EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/20 12:0 a.m.5 views

PT-2024-27496 · Absolute · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.06 Description: The issue is a cross-site scripting vulnerability in the management UI of Absolute Secure Access. This vulnerability allows attackers with system administrator permissions to interfe...

4.5CVSS6.3AI score0.00268EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/06/20 12:0 a.m.6 views

PT-2024-27488 · Unknown · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.06 Description: There is a cross-site scripting issue in the Secure Access administrative UI. Attackers can pass a limited-length script to the administrative UI, which is then stored where an...

5.4CVSS6.3AI score0.00219EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/06/20 12:0 a.m.4 views

PT-2024-27495 · Absolute · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.06 Description: There is a cross-site scripting issue in the management UI of Absolute Secure Access. Attackers with system administrator permissions can exploit this. Recommendations: For versions...

4.5CVSS6.5AI score0.00268EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/06/20 12:0 a.m.4 views

PT-2024-27491 · Absolute · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.06 Description: There is a cross-site scripting issue in the management UI of Absolute Secure Access. Attackers with system administrator permissions can exploit this issue. Recommendations: For...

4.5CVSS6.5AI score0.00268EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/06/19 12:0 a.m.7 views

PT-2024-8636 · Ivanti · Ivanti Secure Access Client

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client versions prior to 22.7R3 Description: The issue is related to improper bounds checking, which can be exploited by a local authenticated attacker with admin privileges to cause a denial of service. This is due to a...

4.6CVSS7AI score0.0028EPSS
SaveExploits0References7
CISA
CISA
added 2024/06/18 12:0 p.m.5 views

CISA and Partners Release Guidance for Modern Approaches to Network Access Security

Today, CISA, in partnership with the Federal Bureau of Investigation FBI, released guidance, Modern Approaches to Network Access Security, along with the following organizations: New Zealand’s Government Communications Security Bureau GCSB; New Zealand’s Computer Emergency Response Team CERT-NZ;...

7.2AI score
SaveExploits0References3
ICS
ICS
added 2024/06/11 12:0 a.m.7 views

Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110 (Update A)

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...

6.5CVSS6.7AI score0.00348EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2024/06/10 12:0 a.m.19 views

The vulnerability of the Ivanti Secure Access Client (formerly Pulse Secure Desktop Client) for corporate networks’ VPN servers in Windows operating systems stems from an operation that goes beyond the buffer in memory, allowing a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the Ivanti Secure Access Client formerly Pulse Secure Desktop Client for corporate networks’ VPN servers on Windows operating systems is related to the execution of commands outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execut...

7.8CVSS8.2AI score0.00343EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/06/10 12:0 a.m.11 views

The vulnerability of the Ivanti Secure Access Client (formerly Pulse Secure Desktop Client)’s VPN server for corporate networks on Linux operating systems arises from an operation that goes beyond the buffer in memory. This allows a malicious user to execute arbitrary code with SYSTEM privileges.

The vulnerability of the Ivanti Secure Access Client formerly Pulse Secure Desktop Client for corporate networks’ VPN servers on Linux operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a attacker to execute...

7.3CVSS8.3AI score0.0031EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2024/06/04 12:0 a.m.7 views

Ivanti Secure Access Client for Linux Elevation of Privilege Vulnerability

Ivanti Secure Access Client for Linux is a solution for enabling secure remote access, supporting SSL VPN connections and allowing users to securely access internal network resources e.g., administrative systems, applications, etc. from off-campus. An elevation of privilege vulnerability exists i...

7.3CVSS7.9AI score0.0031EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/31 6:15 p.m.8 views

CVE-2023-38042

A local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a low privileged user to execute code as SYSTEM...

7.8CVSS5.9AI score0.00343EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/31 6:15 p.m.36 views

CVE-2023-38042

A local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a low privileged user to execute code as SYSTEM...

7.8CVSS7.8AI score0.00343EPSS
SaveExploits0References1
Rows per page
Query Builder