Lucene search
+L

6396 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/17 12:00 a.m.•6 views

CVE-2025-4879: Improper Privilege Management

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

7.8CVSS5.8AI score0.0013EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•23 views

PT-2025-25652 · Citrix · Citrix Workspace App For Windows

Name of the Vulnerable Software and Affected Versions: Citrix Workspace app for Windows affected versions not specified Description: The issue allows a low-privileged user to gain SYSTEM privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix...

7.8CVSS6.3AI score0.0013EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/06/17 12:00 a.m.•21 views

Citrix Workspace app for Windows 安全漏洞

Citrix Workspace app for Windows is a client software from Citrix, Inc. that is used to access an organization's hosted applications and desktops. A security vulnerability exists in the Citrix Workspace app for Windows that stems from improper privilege management and could result in a...

7.8CVSS6.5AI score0.0013EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/06/17 12:00 a.m.•21 views

Unspecified Vulnerability in Ivanti Workspace Control (CNVD-2025-15108)

Ivanti Workspace Control is a desktop management solution from Ivanti. Ivanti Workspace Control suffers from a security vulnerability that originates from hard-coded keys, which can be exploited by an attacker to decrypt stored SQL credentials...

8.8CVSS9.4AI score0.00376EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/12 3:21 p.m.•14 views

CVE-2025-5353

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials...

8.8CVSS8.5AI score0.00376EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/12 3:21 p.m.•16 views

CVE-2025-22455

A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials...

8.8CVSS8.5AI score0.00376EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/12 3:21 p.m.•16 views

CVE-2025-22463

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password...

7.3CVSS7AI score0.0036EPSS
SaveExploits0References1
NCSC
NCSC
•added 2025/06/12 11:08 a.m.•23 views

Vulnerabilities fixed in Ivanti Workspace Control

Ivanti has fixed vulnerabilities in Ivanti Workspace Control Specifically for versions prior to 10.19.10.0. The vulnerabilities are in the hard-coded keys within Ivanti Workspace Control, specifically in versions prior to 10.19.10.0. These vulnerabilities allow local, authenticated attackers to...

8.8CVSS7.4AI score0.00376EPSS
SaveExploits0References1
Citrix
Citrix
•added 2025/06/10 4:38 p.m.•74 views

Citrix Workspace app for Windows Security Bulletin CVE-2024-6286

Description of Problem A vulnerability has been discovered that impacts the Citrix Workspace app for Windows. Refer to below for further details: Affected Versions The vulnerability affects the following supported versions of the Citrix Workspace app for Windows Current Release CR Citrix Workspac...

8.5CVSS9.7AI score0.00389EPSS
SaveExploits0
osv_cve
osv_cve
•added 2025/06/10 3:15 p.m.•13 views

CVE-2025-5353

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials...

7.8CVSS5.8AI score0.00376EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/10 3:15 p.m.•12 views

CVE-2025-5353

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials...

8.8CVSS0.00376EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/06/10 3:15 p.m.•10 views

CVE-2025-5353

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials...

8.8CVSS5.9AI score0.00376EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/06/10 3:15 p.m.•9 views

CVE-2025-22463

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password...

7.3CVSS6AI score0.00376EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/06/10 3:15 p.m.•9 views

CVE-2025-22463

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password...

8.8CVSS5.4AI score0.00376EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/06/10 3:15 p.m.•9 views

CVE-2025-22455

A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials...

7.8CVSS5.8AI score0.00376EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/06/10 3:15 p.m.•15 views

CVE-2025-22455

A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials...

8.8CVSS5.6AI score0.00376EPSS
SaveExploits0References2
NVD
NVD
•added 2025/06/10 3:15 p.m.•17 views

CVE-2025-22455

A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials...

8.8CVSS0.00376EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/10 3:15 p.m.•12 views

CVE-2025-22463

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password...

7.3CVSS0.0036EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/10 2:39 p.m.•87 views

CVE-2025-5353

Ivanti Workspace Control is affected by a vulnerability caused by a hard-coded key that can be exploited by a local, authenticated attacker to decrypt stored SQL credentials. Affected versions are before 10.19.10.0. Impact is exposure of sensitive database credentials due to weak key handling. Th...

8.8CVSS8.6AI score0.00376EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/06/10 2:39 p.m.•26 views

CVE-2025-5353

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials...

8.8CVSS0.00376EPSS
SaveExploits0References1
Rows per page
Query Builder