PT-2025-28485 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Description: The issue allows a local authenticated attacker to obtain sensitive information that has been inserted into a log file. Recommendations: For versions prior to 22.7R2.8, update to...

PT-2025-28482 · Ivanti · Ivanti Connect Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Ivanti Policy Secure versions prior to 22.7R1.5 Description: The issue allows a remote authenticated attacker with admin rights to access internal network services. This is due to a Server-Side...

PT-2025-28758

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 24.0 and earlier Description: Adobe Connect versions 24.0 and earlier are susceptible to a Deserialization of Untrusted Data issue. Successful exploitation of this issue could allow an attacker to execute arbitrary code...

PT-2025-28476 · Ivanti · Ivanti Connect Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Ivanti Policy Secure versions prior to 22.7R1.5 Description: The issue is related to improper access control in the certificate management component. This allows a remote authenticated admin wi...

PT-2025-28478 · Ivanti · Ivanti Connect Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Ivanti Policy Secure versions prior to 22.7R1.5 Description: The issue allows a local authenticated attacker to obtain sensitive information that has been inserted into a log file...

PT-2025-28483 · Ivanti · Ivanti Connect Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Ivanti Policy Secure versions prior to 22.7R1.5 Description: The issue allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk through CLRF...

Adobe Connect code-related vulnerabilities

Adobe Connect is a software used to create conferencing environments by Adobe USA. A code issue vulnerability exists in Adobe Connect 24.0 and prior versions that stems from deserialization of untrusted data could lead to arbitrary code execution, requiring user interaction and scope changes...

Ivanti Connect Secure and Ivanti Policy Secure have injection vulnerabilities

Ivanti Connect Secure ICS and Ivanti Policy Secure IPS are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. An injection vulnerability exists in Ivanti Connect Secure version...

Ivanti Connect Secure and Ivanti Policy Secure code-related vulnerabilities

Ivanti Connect Secure ICS and Ivanti Policy Secure IPS are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A code issue vulnerability exists in Ivanti Connect Secure version...

Ivanti Connect Secure log information leakage vulnerability

Ivanti Connect Secure ICS is a secure remote network connectivity tool from Ivanti Corporation, USA. A log information disclosure vulnerability exists in Ivanti Connect Secure versions prior to 22.7R2.8, which originates when sensitive information is inserted into a log file, potentially leading ...

Ivanti Connect Secure security vulnerabilities

Ivanti Connect Secure ICS is a secure remote network connection tool from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Connect Secure versions prior to 22.7R2.8 and Ivanti Policy Secure versions prior to 22.7R1.5, which stems from a stack buffer overflow that could result in...

Ivanti Connect Secure log information leakage vulnerability

Ivanti Connect Secure ICS is a secure remote network connectivity tool from Ivanti Corporation, USA. A log information disclosure vulnerability exists in Ivanti Connect Secure versions prior to 22.7R2.8 and Ivanti Policy Secure versions prior to 22.7R1.5, which stems from the insertion of sensiti...

Ivanti Connect Secure and Ivanti Policy Secure have security vulnerabilities

Ivanti Connect Secure ICS and Ivanti Policy Secure IPS are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A security vulnerability exists in Ivanti Connect Secure versions...

IBM App Connect Enterprise (ACE) Detection (Windows)

Binary data ibmacewininstalled.nbin...

Introspection Mode Feature OpenAPISSIX

The vulnerability of the Introspection Mode feature in the openid-connect plugin for the Apache APISIX cloud API gateway involves bypassing authentication by using the same secret key. Exploiting this vulnerability could allow a malicious actor to gain access to a user’s account remotely...

CVE-2025-29007

Missing Authorization vulnerability in LMSACE LMSACE Connect lmsace-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LMSACE Connect: from n/a through = 3.4...

CVE-2025-46647

A vulnerability of plugin openid-connect in Apache APISIX. This vulnerability will only have an impact if all of the following conditions are met: 1. Use the openid-connect plugin with introspection mode 2. The auth service connected to openid-connect provides services to multiple issuers 3...

CVE-2025-28983

CVE-2025-28983 describes an SQL Injection in Click & Pledge Connect for WordPress plugin versions 25.04010101 through WP6.8 that enables privilege escalation. The CVE is rated with a high impact (CVSS 3.1, base 9.8) and network attack vector with no user interaction required. Connected sources co...

CVE-2025-29007

Missing Authorization vulnerability in LMSACE LMSACE Connect lmsace-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LMSACE Connect: from n/a through = 3.4...

CVE-2025-29007 WordPress LMSACE Connect plugin <= 3.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in LMSACE LMSACE Connect lmsace-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LMSACE Connect: from n/a through = 3.4...