16646 matches found
CVE-2024-44103
Ivanti Workspace Control is affected by DLL hijacking in the management console prior to version 2025.2 (10.19.0.0). A locally authenticated attacker can escalate privileges due to an insecure DLL search path. Public sources corroborate that affected versions include 10.18.0.0 and earlier, with e...
CVE-2024-44103
DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...
CVE-2024-38259
Microsoft Management Console Remote Code Execution Vulnerability...
CVE-2024-38259
Microsoft Management Console Remote Code Execution Vulnerability...
CVE-2024-38259 Microsoft Management Console Remote Code Execution Vulnerability
...
CVE-2024-38259 Microsoft Management Console Remote Code Execution Vulnerability
...
CVE-2024-38259
CVE-2024-38259 (Microsoft Management Console Remote Code Execution) is a MMC component vulnerability with CVSS v3.1 base score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). It affects MMC and is described with potential to execute code remotely when exploited. The MMC entry is listed in Microsoft/VC...
Microsoft Management Console Remote Code Execution Vulnerability
...
PT-2024-6588 · Ivanti · Ivanti Epm
Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions before 2022 SU6 Ivanti EPM versions before the 2024 September update Description: The issue is related to SQL injection in the management console of Ivanti EPM, allowing a remote unauthenticated attacker to achieve remote...
Fedora: Security Advisory (FEDORA-2024-6b8845e3f0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-6587 · Ivanti · Ivanti Workspace Control
Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to an uncontrolled search path element in the Ivanti Workspace Control software, which can be exploited to allow an attacker to escalate their privileges...
PT-2024-6586 · Ivanti · Ivanti Workspace Control
Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to insufficient server-side controls in the management console of Ivanti Workspace Control, which can be exploited by a local authenticated attacker to...
Ivanti Workspace Control code-related vulnerabilities
Ivanti Workspace Control is a suite of workspace control software from Ivanti USA. The software includes features such as user management, application management, and report management. A code issue vulnerability previously existed in Ivanti Workspace Control version 10.18.0.0, which stemmed from...
CVE-2024-44105: Cleartext Transmission of Sensitive Information
Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to obtain OS credentials...
Ivanti Workspace Control security vulnerabilities
Ivanti Workspace Control is an American etc are products of the American Ivanti company.Ivanti Workspace Control is a suite of workspace control software.console etc are open source products.console is an application software.WebSockets ws etc are WebSockets are open source products. ws is a...
CVE-2024-44107: Uncontrolled Search Path Element
DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution...
Intel® RAID Web Console Software Advisory
Summary: Potential security vulnerabilities in Intel® RAID Web Console software may allow escalation of privilege, denial of service, information disclosure. Intel is not releasing updates to mitigate this potential vulnerability and has issued a product discontinuation notice for Intel® RAID Web...
CVE-2024-8191: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution...
CVE-2024-44103: Untrusted Search Path
DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...