Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/12/18 1:52 a.m.2 views

CVE-2025-67791

An issue was discovered in DriveLock 24.1 through 24.1., 24.2 through 24.2., and 25.1 through 25.1.. An incomplete configuration agent authentication in DriveLock tenant allows attackers to impersonate any DriveLock agent on the network against the DES DriveLock Enterprise Service...

9.8CVSS6.9AI score0.00076EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/17 12:0 a.m.15 views

CVE-2025-67791

An issue was discovered in DriveLock 24.1 through 24.1., 24.2 through 24.2., and 25.1 through 25.1.. An incomplete configuration agent authentication in DriveLock tenant allows attackers to impersonate any DriveLock agent on the network against the DES DriveLock Enterprise Service...

0.00076EPSS
Exploits0References1
CNVD
CNVD
added 2025/08/20 12:0 a.m.1 views

Ivanti Avalanche Code Execution Vulnerability

Ivanti Avalanche is an enterprise mobile device management system from Ivanti for managing mobile devices such as smartphones and tablets. A code execution vulnerability exists in Ivanti Avalanche, which stems from an incomplete configuration restriction, and can be exploited by an attacker to...

7.2CVSS8.1AI score0.11375EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/14 3:49 p.m.5 views

CVE-2025-8297

Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

7.2CVSS7.5AI score0.11375EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/12 2:37 p.m.3 views

CVE-2025-8297

Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

7.2CVSS0.11375EPSS
Exploits0References1
CVE
CVE
added 2025/08/12 2:37 p.m.15 views

CVE-2025-8297

CVE-2025-8297 affects Ivanti Avalanche prior to version 6.4.8.8008. Multiple sources describe an incomplete configuration restriction that enables a remote authenticated attacker with admin privileges to achieve remote code execution. The confirmed impact is remote code execution with high severi...

7.2CVSS7.8AI score0.11375EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2023/08/24 5:15 p.m.2 views

CVE-2023-40709

An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SNAP PAC S1 Firmware version R10.3b...

7.5CVSS5.8AI score
Exploits0References1
OpenVAS
OpenVAS
added 2017/05/16 12:0 a.m.34 views

Cisco WebEx Meetings Server 'robots.txt' Information Disclosure Vulnerability

Cisco WebEx Meetings Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.3AI score0.00438EPSS
Exploits0References3
Rows per page
Query Builder