Lucene search
+L

120 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.20 views

Ivanti Avalanche WLAvalancheService Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue...

5.3CVSS6.7AI score0.01987EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.17 views

Ivanti Avalanche WLAvalancheService Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue results from t...

8.8CVSS8.9AI score0.03237EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.15 views

Ivanti Avalanche WLAvalancheService Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue...

6.5CVSS6.5AI score0.01728EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.17 views

Ivanti Avalanche WLAvalancheService Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue results from t...

8.8CVSS8.9AI score0.02616EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.24 views

Ivanti Avalanche WLAvalancheService Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue...

5.3CVSS5.3AI score0.01884EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.16 views

Ivanti Avalanche WLAvalancheService Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue results from t...

8.8CVSS8.9AI score0.03048EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.14 views

Ivanti Avalanche WLAvalancheService Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue results from t...

8.8CVSS8.9AI score0.03241EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.16 views

Ivanti Avalanche WLAvalancheService Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue results from t...

8.8CVSS8.9AI score0.02851EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.18 views

Ivanti Avalanche WLAvalancheService Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue...

5.3CVSS5.3AI score0.01884EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.19 views

Ivanti Avalanche WLAvalancheService Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue results from t...

7.5CVSS7.8AI score0.01789EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.14 views

Ivanti Avalanche WLAvalancheService Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue results from t...

7.1CVSS6.9AI score0.01807EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.23 views

Ivanti Avalanche WLAvalancheService Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue results from t...

8.8CVSS8.9AI score0.03237EPSS
Exploits0References1
NVD
NVD
added 2024/04/19 2:15 a.m.35 views

CVE-2024-27978

A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks...

6.5CVSS6.3AI score0.01728EPSS
Exploits0References1
OSV
OSV
added 2024/04/19 2:15 a.m.5 views

CVE-2024-27978

A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks...

6.5CVSS5.8AI score0.01728EPSS
Exploits0References1
OSV
OSV
added 2024/04/19 2:15 a.m.2 views

CVE-2024-29204

A Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to execute arbitrary commands...

9.8CVSS6AI score0.04308EPSS
Exploits0References1
NVD
NVD
added 2024/04/19 2:15 a.m.24 views

CVE-2024-24991

A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks...

6.5CVSS6.3AI score0.01728EPSS
Exploits0References1
OSV
OSV
added 2024/04/19 2:15 a.m.3 views

CVE-2024-23526

An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory...

7.5CVSS7.3AI score0.01884EPSS
Exploits0References1
NVD
NVD
added 2024/04/19 2:15 a.m.22 views

CVE-2024-23526

An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory...

7.5CVSS5.2AI score0.01884EPSS
Exploits0References1
NVD
NVD
added 2024/04/19 2:15 a.m.19 views

CVE-2024-23532

An out-of-bounds Read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks. In certain conditions this could also lead to remote code execution...

7.5CVSS7.7AI score0.01789EPSS
Exploits0References1
OSV
OSV
added 2024/04/19 2:15 a.m.7 views

CVE-2024-23532

An out-of-bounds Read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks. In certain conditions this could also lead to remote code execution...

7.5CVSS6AI score0.01789EPSS
Exploits0References1
Rows per page
Query Builder