Lucene search
+L

1210 matches found

OSV
OSV
added 2024/05/31 6:15 p.m.7 views

CVE-2023-46810

A local privilege escalation vulnerability in Ivanti Secure Access Client for Linux before 22.7R1, allows a low privileged user to execute code as root...

7.3CVSS5.9AI score0.0031EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/31 5:38 p.m.21 views

CVE-2023-38042

A local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a low privileged user to execute code as SYSTEM...

7.8CVSS7.6AI score0.00343EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/31 5:38 p.m.34 views

CVE-2023-46810

A local privilege escalation vulnerability in Ivanti Secure Access Client for Linux before 22.7R1, allows a low privileged user to execute code as root...

7.3CVSS7.3AI score0.0031EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/31 5:38 p.m.19 views

CVE-2023-46810

A local privilege escalation vulnerability in Ivanti Secure Access Client for Linux before 22.7R1, allows a low privileged user to execute code as root...

7.3CVSS7.4AI score0.0031EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/05/31 12:0 a.m.11 views

Ivanti Secure Access Client Security Vulnerability

Ivanti Secure Access Client is a security software client from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Secure Access Client versions prior to 22.7R1, which stems from the presence of a local elevation of privilege vulnerability that allows a low-privileged user to execu...

7.8CVSS7.2AI score0.00343EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/31 12:0 a.m.7 views

Ivanti Secure Access Client 安全漏洞

Ivanti Secure Access Client for Linux is a solution for enabling secure remote access, supporting SSL VPN connections and allowing users to securely access internal network resources e.g., administrative systems, applications, etc. from off-campus. An elevation of privilege vulnerability exists i...

7.3CVSS7.9AI score0.0031EPSS
SaveExploits0References3
Talos Blog
Talos Blog
added 2024/05/29 4:32 p.m.31 views

New Generative AI category added to Talos reputation services

Cisco Talos is preparing to release the first in a series of changes to our Web Categorization system, which is designed to simplify the verbiage we use. In mid-June, were adding a new "Generative AI" category that will apply to certain websites. The "Content Category" appears whenever a user...

6.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/05/21 12:0 a.m.6 views

PT-2024-4023 · Ivanti · Ivanti Secure Access Client For Linux

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client for Linux versions prior to 22.7R1 Description: A local privilege escalation issue allows a low-privileged user to execute code as root. The vulnerability is related to a buffer overflow in memory, which can be...

7.3CVSS7.9AI score0.0031EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/05/21 12:0 a.m.15 views

PT-2024-4024 · Ivanti · Ivanti Secure Access Client For Windows

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client for Windows affected versions not specified Description: A local privilege escalation issue in Ivanti Secure Access Client for Windows allows a low-privileged user to execute code as SYSTEM. The vulnerability is...

7.8CVSS8.2AI score0.00343EPSS
SaveExploits0References7
CNVD
CNVD
added 2024/05/16 12:0 a.m.10 views

Siemens RUGGEDCOM CROSSBOW File Name or Path External Control Vulnerability

Siemens RUGGEDCOM CROSSBOW is a proven secure access management solution from Siemens, Germany. Siemens RUGGEDCOM CROSSBOW suffers from a filename or path external control vulnerability due to a bulk import feature on the affected system that allows a privileged user to upload files to the root...

7.2CVSS7.5AI score0.01352EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/05/06 12:0 a.m.9 views

The vulnerability of the Ivanti Secure Access Client (formerly Pulse Secure Desktop Client) for corporate networks’ VPN servers in Windows operating systems, related to synchronization errors when using a shared resource, allows a hacker to escalate their privileges.

The vulnerability of the VPN server for corporate networks of Ivanti Secure Access Client formerly Pulse Secure Desktop Client on Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to increase their...

7.8CVSS7.2AI score0.00672EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/03 12:0 a.m.10 views

PT-2024-21154 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 9.0 Description: An issue was discovered in the Presta World "Account Manager - Sales Representative & Dealers - CRM" prestasalesmanager module, allowing remote attackers to escalate privilege and obtain sensitive...

7.5CVSS6.8AI score0.0055EPSS
SaveExploits0References7
HackRead
HackRead
added 2024/01/30 2:0 p.m.9 views

Aembit Teams Up with CrowdStrike for Secure Workload Access

By cyberwire Aembit Announces New Workload IAM Integration with CrowdStrike to Help Enterprises Secure Workload-to-Workload Access. This is a post from HackRead.com Read the original post: Aembit Teams Up with CrowdStrike for Secure Workload Access...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/12/20 12:0 a.m.87 views

Ivanti Secure Access Client < 22.6R1.1 Multiple Vulnerabilities

The Ivanti Secure Access Client installed on the remote Windows system is prior to 22.6R1.1. It is, therefore, affected by multiple vulnerabilities. - A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to...

8.8CVSS7.8AI score0.00713EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:0 a.m.7 views

The vulnerability of the VPN server of the Ivanti Secure Access Client (ISAC) for corporate networks (formerly known as Pulse Secure Desktop Client) on Windows operating systems arises from the use of insecure configurations. This vulnerability allows attackers to gain unauthorized access to protected information, increase their privileges, or cause service interruptions.

The vulnerability of the VPN server of Ivanti Secure Access Client formerly Pulse Secure Desktop Client for Windows operating systems is related to the use of insecure configurations. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, increase...

7.8CVSS7.6AI score0.00713EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2023/11/15 12:15 a.m.21 views

CVE-2023-38543

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service DoS condition on the user machine...

8.8CVSS0.00369EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/15 12:15 a.m.16 views

CVE-2023-35080

A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to various security risks, including the escalation of privileges, denial of service, or information...

8.8CVSS0.00713EPSS
SaveExploits1References1
OSV
OSV
added 2023/11/15 12:15 a.m.2 views

CVE-2023-35080

A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to various security risks, including the escalation of privileges, denial of service, or information...

7.8CVSS5.7AI score0.00713EPSS
SaveExploits1References1
NVD
NVD
added 2023/11/15 12:15 a.m.26 views

CVE-2023-38043

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service DoS condition on the user machine and, in some cases, resulting in a full...

8.8CVSS0.0037EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/15 12:15 a.m.6 views

CVE-2023-38043

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service DoS condition on the user machine and, in some cases, resulting in a full...

7.8CVSS5.8AI score0.0037EPSS
SaveExploits0References2
Rows per page
Query Builder