CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

372 matches found

Nuclei•added 2026/09/14 5:13 a.m.•115 views

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcardRecursive endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remot...

9.8CVSS9AI score0.99992EPSS

SaveExploits1References2

Kitploit•added 2026/09/13 11:01 p.m.•4 views

Ivanti-EPM-Coercion-Vulnerabilities

Ivanti EPM 認証情報強制の脆弱性 Ivanti EPM CVE-2024-13159 およびその他の脆弱性の概念実証エクスプロイト。リレー攻撃での使用のために、Ivanti EPM マシン認証情報の認証なしでの強制を可能にします。ブログ記事詳細な分析はこちら: https://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities/ 使用方法 root@kitploit: % python3...

9.8CVSS8.5AI score0.99992EPSS

SaveExploits1

Kitploit•added 2026/09/13 5:43 p.m.•6 views

CVE-2024-29824

CVE-2024-29824: Ivanti EPM SQLインジェクションリモートコード実行の脆弱性脆弱なIvanti EPMアプライアンス上でブラインドでコマンドを実行する概念実証エクスプロイトです。ブログ記事詳細な解説と侵害の指標はこちら： https://www.horizon3.ai/attack-research/attack-blogs/cve-2024-29824-deep-dive-ivanti-epm-sql-injection-remote-code-execution-vulnerability 使用方法 root@kitploit: % python...

9.6CVSS8.7AI score0.99951EPSS

SaveExploits5

Kitploit•added 2026/09/13 3:49 p.m.•4 views

CVE-2023-28324

CVE-2023-28324 Ivanti EPM に影響する CVE-2023-28324 の PoC 技術分析脆弱性の根本原因の技術的分析は弊社ブログでご覧いただけます： https://www.horizon3.ai/attack-research/attack-blogs/cve-2023-28324-deep-dive/ 概要この PoC は AgentPortal.exe の脆弱性を悪用して任意のコマンドを実行します。この PoC を動作させるには、Ivanti EPM インストールから AgentPortal.exe と APCommon.dll...

9.8CVSS8.2AI score0.12904EPSS

SaveExploits5

Kitploit•added 2026/09/12 11:37 p.m.•6 views

cve-2024-50330-ivanti_epm_sqli_reproduction

CVE-2024-50330: Ivanti Endpoint Manager EPM SQL注入到远程代码执行概述 CVE-2024-50330 是 Ivanti Endpoint Manager EPM 中存在的一个严重的预认证 SQL 注入漏洞，允许远程未认证攻击者在目标服务器上实现远程代码执行。该漏洞已于2024年11月的安全更新中披露并修复。技术细节 CVE ：CVE-2024-50330 CWE ：CWE-89（SQL注入） CVSS ：严重（CVSS 3.x 评分约9.8）攻击向量：网络认证：不需要影响：远程代码执行该漏洞存在于 Ivanti EPM W...

9.8CVSS7.5AI score0.403EPSS

SaveExploits1

Kitploit•added 2026/09/10 1:04 a.m.•9 views

CVE-2021-44529

CVE-2021-44529 CVE-2021-44529 Ivanti EPM 云服务设备 CSA 中的代码注入漏洞允许未经身份验证的用户以有限的权限（nobody）执行任意代码。...

9.8CVSS8.4AI score0.99105EPSS

SaveExploits9

Ivanti•added 2026/08/11 1:58 p.m.•26 views

Security Advisory Ivanti Endpoint Manager (EPM) August 2026

Security Advisory Ivanti Endpoint Manager Multiple CVEs Summary: Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...

8.1CVSS5.9AI score0.0089EPSS

SaveExploits0

RedhatCVE•added 2026/01/09 8:35 a.m.•19 views

CVE-2024-34785

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

9.1CVSS8AI score0.25389EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 8:34 a.m.•20 views

CVE-2024-34783

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

9.1CVSS8AI score0.43356EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 8:34 a.m.•15 views

CVE-2024-34779

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

9.1CVSS8AI score0.24005EPSS

SaveExploits0References1