Lucene search
+L

1089 matches found

BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.7 views

The vulnerability of the Ivanti Avalanche device management system, related to executing a loop with an unavailable exit condition, allows a intruder to trigger a service failure.

The vulnerability of the Ivanti Avalanche device management system lies in the execution of a cycle with an unavailable exit condition. Exploiting this vulnerability allows a remote attacker to cause a service failure...

7.8CVSS7.4AI score0.31235EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.9 views

The vulnerability of the Ivanti Avalanche device management system, related to executing a loop with an unavailable exit condition, allows a intruder to trigger a service failure.

The vulnerability of the Ivanti Avalanche device management system lies in the execution of a cycle with an unavailable exit condition. Exploiting this vulnerability allows a remote attacker to cause a service failure...

7.8CVSS7.4AI score0.01113EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.7 views

The vulnerability of the SmartDeviceServer component in the Ivanti Avalanche mobile device management system allows a hacker to disclose protected information.

The vulnerability of the SmartDeviceServer component in the Ivanti Avalanche mobile device management system is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

8.5CVSS7.4AI score0.91984EPSS
Exploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/11/15 12:0 a.m.29 views

Ivanti Avalanche < 6.4.3 Multiple Vulnerabilities

The version of Ivanti Avalanche running on the remote host is prior to 6.4.3. It is, therefore, is affected by multiple vulnerabilities : - A Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to execute arbitrary...

9.8CVSS7.2AI score0.70908EPSS
Exploits0References28
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:0 a.m.12 views

Ivanti Avalanche WLAvalancheService TV_FN Infinite Loop Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService service, which listens on TCP port 1777 by default...

7.5CVSS6.6AI score0.01113EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:0 a.m.11 views

Ivanti Avalanche WLAvalancheService TV_FC Infinite Loop Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService service, which listens on TCP port 1777 by default...

7.5CVSS6.6AI score0.31235EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:0 a.m.9 views

Ivanti Avalanche WLAvalancheService TV_FP Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService service, which listens on TCP port 1777 by default...

7.5CVSS6.6AI score0.01113EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:0 a.m.11 views

Ivanti Avalanche WLAvalancheService TV_FP Infinite Loop Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService service, which listens on TCP port 1777 by default...

7.5CVSS6.6AI score0.01113EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:0 a.m.19 views

Ivanti Avalanche WLAvalancheService TV_FN Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService service, which listens on TCP port 1777 by default...

7.5CVSS6.6AI score0.01113EPSS
Exploits0References1
NVD
NVD
added 2024/11/12 4:15 p.m.25 views

CVE-2024-50331

An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory...

7.5CVSS0.01074EPSS
Exploits0References1
OSV
OSV
added 2024/11/12 4:15 p.m.7 views

CVE-2024-50331

An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory...

7.5CVSS5.8AI score0.01074EPSS
Exploits0References1
OSV
OSV
added 2024/11/12 4:15 p.m.4 views

CVE-2024-50321

An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

7.5CVSS5.8AI score0.01113EPSS
Exploits0References1
NVD
NVD
added 2024/11/12 4:15 p.m.19 views

CVE-2024-50321

An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

7.5CVSS0.01113EPSS
Exploits0References1
OSV
OSV
added 2024/11/12 4:15 p.m.7 views

CVE-2024-50317

A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

7.5CVSS5.8AI score0.01113EPSS
Exploits0References1
OSV
OSV
added 2024/11/12 4:15 p.m.6 views

CVE-2024-50319

An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

7.5CVSS5.8AI score0.01113EPSS
Exploits0References1
NVD
NVD
added 2024/11/12 4:15 p.m.24 views

CVE-2024-50320

An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

7.5CVSS0.31235EPSS
Exploits0References1
OSV
OSV
added 2024/11/12 4:15 p.m.5 views

CVE-2024-50318

A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

7.5CVSS5.8AI score0.01113EPSS
Exploits0References1
NVD
NVD
added 2024/11/12 4:15 p.m.18 views

CVE-2024-50319

An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

7.5CVSS0.01113EPSS
Exploits0References1
NVD
NVD
added 2024/11/12 4:15 p.m.35 views

CVE-2024-50317

A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

7.5CVSS0.01113EPSS
Exploits0References1
NVD
NVD
added 2024/11/12 4:15 p.m.26 views

CVE-2024-50318

A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service...

7.5CVSS0.01113EPSS
Exploits0References1
Rows per page
Query Builder